PSA for Kingoroot exploit users, major problem discovered - Fire TV General

This is a bit of a back story for those interested, or for those who this will happen to, to help people find this thread by including a bunch of possible symptoms, skip to the end for the tl;dr heads-up.
So over the past two days I've been struggling to figure out why a heavily customized Fire Stick I use all of a sudden stopped connecting to the network.
On Tuesday I just happened to upgrade my wireless router's firmware (asuswrt merlin fork for the R7000 called XWRT, but irrelevant to the problem) and was very happy with the new release. All my other devices on the network were working well, and I decided to go downstairs and watch something on the Fire TV Stick.
The first indication that something was wrong was in SPMC (Kodi), not being able to apply any add-on updates, and not being able to connect to a local FTP server with media. I first thought that the wireless network has to be 'forgotten' and signed onto again to fix some low level change in the router's wireless driver conflicting with the Fire stick's wireless driver.
Before I planned on doing this, I first connected to the stick via wireless ADB and hit 'su' at the prompt, getting ready to poke around in dmesg/logcat. I then did one troubleshooting step, try another app to see if it just was Kodi that was having trouble. I loaded up Youtube and it played a video just fine.
I went back to the computer to use the adb shell, when it all of a sudden disconnected. I couldn't reconnect, so I decided to restart the Fire Stick to get everything sorted out.
When the Fire Stick restarted, it wasn't connected to wireless any longer. When I went into Fire TV network settings, not only did I not see my wireless networks, but there were zero other options - no 'Join', 'WPS entry', no options whatsoever. This was the beginning of the two day hassle.
My Fire stick is on firmware 5.2.10 rooted with Kingo root exploit, and loaded up with Xposed from tips on the guide by sconnyuk. Two xposed modules were installed, Youtube ad-away and rbox mods (to enable the use of Firestopper home screen). Other root-related apps installed included AdAway, Busybox, Kernel adiutor, etc.
I also had a bunch of Amazon packages disabled to 'de-bloat' the limited memory:
Code:
# pm list packages -d
package:com.amazon.precog
package:com.amazon.recess
package:com.amazon.whisperplay.contracts
package:com.amazon.bueller.photos
package:com.amazon.kindle.cms
package:com.amazon.client.metrics
package:com.amazon.device.software.ota
package:com.kingouser.com
package:com.amazon.whisperlink.core.android
package:com.amazon.application.compatibility.enforcer
package:com.amazon.whisperplay.service.install
package:com.amazon.device.software.ota.override
package:com.amazon.bueller.music
Originally I thought it was something I did to the stick, with these heavy customizations. I brought the laptop down and plugged it in to do some USB ADB debugging.
The first thing I noticed was in the kernel log,
Code:
# dmesg
[...]
<6>[ 42.472473] CFG80211-ERROR) wl_event_handler : was terminated
<4>[ 42.472717] wl_destroy_event_handler(): thread:wl_event_handler:4d0 terminated OK
<6>[ 42.685516] usb 1-1: new high speed USB device number 3 using bcm-ehci
<6>[ 42.852508] usb 1-1: New USB device found, idVendor=0a5c, idProduct=bd1f
<6>[ 42.852569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
<6>[ 42.852722] usb 1-1: Product: Remote Download Wireless Adapter
<6>[ 42.852783] usb 1-1: Manufacturer: Broadcom
<6>[ 42.852905] usb 1-1: SerialNumber: 000000000001
[b]<4>[ 43.262603] wifi_platform_prealloc: failed to alloc static mem section 7[/b]
<6>[ 43.262725] usbcore: deregistering interface driver dbus_usbdev
<4>[ 43.262939] found wifi platform device bcmdhd_wlan
<4>[ 43.263092] unregister wifi platform drivers
<4>[ 43.263153] CSP bus_remove_driver bcmdhd_wlan node address is c300709c
<4>[ 43.263305] CSP klist_remove node is c300709c
<4>[ 43.263366] CSP klist_del
<4>[ 43.263427] CSP klist_put
<4>[ 43.263549] CSP klist_release setting woken == 1 waiter node c300709c waiter process c90a52c0 node c300709c
<4>[ 43.263610] CSP klist_remove waiting waiter node c300709c waiter process c90a52c0
<4>[ 43.263732] CSP bus: 'platform': remove driver bcmdhd_wlan
When I first saw the 'wifi_platform_prealloc: failed to alloc static mem section 7' line I went 'uh-oh' thinking it was some sort of hardware failure, maybe the stick was running 100% CPU and cooked something, etc. I didn't really understand what this really meant and tried a bunch of hardware solutions: hard power cycle the stick, try a different power supply, leave it unplugged for 5 minutes, leave unplugged for 5 hours, etc. I couldn't sort out why it was unloading the wifi driver...
Then I tried some software fixes, re-enabling all packages, reverting /etc/hosts, deleting the saved network from /data/misc/wifi/wpa_supplicant.conf, svc wifi disable / enable, even so far as to go poking into /data/data/com.android.providers.settings/databases/settings.db with sqlite3 turning airplane mode on/off, wifi_on off/on, etc. Just anything I could think of to trigger something.
I finally gave up the first night and left it unplugged just to be safe, and thought about my options. Since I've so heavily modified the stick, I wasn't 100% certain that a Factory Reset would work, with the obvious issue of bringing up the wireless hardware properly in order to get past the Amazon sign-in to re-enable ADB debugging. If something was really wrong, this would end up as a brick with no network and no ADB access.
I'm still not sure about that part, but I'm sure glad I waited and thought about things a bit more, as you'll see.

So today, it was time to have a second look. This time, looking in the logcat I noticed a very bizarre error:
Code:
E/wpa_supplicant( 1460): Could not unlink existing ctrl_iface socket '/data/misc/wifi/sockets/wlan0': No such file or directory
E/wpa_supplicant( 1460): Failed to initialize control interface '/data/misc/wifi/sockets'.
E/wpa_supplicant( 1460): You may have another wpa_supplicant process already running or the file was
E/wpa_supplicant( 1460): left by an unclean termination of wpa_supplicant in which case you will need
E/wpa_supplicant( 1460): to manually remove this file before starting wpa_supplicant again.
I/ValidateNoPeople( 1072): skipping global notification
D/VendorDisplayManagerGlobalCallback( 1562): callGetInstance: nil
E/WifiHW ( 1072): Unable to open connection to supplicant on "@android:wpa_wlan0": No space left on device
I went into /data/misc/wifi, deleted sockets, and rebooted, hoping the system would re-initialize the iface socket dir. No luck. I then looked even closer at the logcat: 'no space left on device'? What! It says right in the system applications menu Fire stick has 1.5 GB free disk space. I even confirmed it to be sure:
Code:
[[email protected]:/ # df
Filesystem Size Used Free Blksize
/dev 245.6M 40.0K 245.5M 4096
/sys/fs/cgroup 245.6M 0.0K 245.6M 4096
/mnt/asec 245.6M 0.0K 245.6M 4096
/mnt/obb 245.6M 0.0K 245.6M 4096
/tmp 245.6M 0.0K 245.6M 4096
/system 773.6M 542.6M 231.0M 4096
/data 5.6G 4.1G 1.5G 4096
/cache 773.6M 274.6M 499.0M 4096
/persist 7.6M 4.3M 3.3M 4096
/mnt/shell/emulated 5.6G 4.1G 1.5G 4096
/storage/emulated 245.6M 0.0K 245.6M 4096
/storage/emulated/0 5.6G 4.1G 1.5G 4096
/storage/emulated/0/Android/obb 5.6G 4.1G 1.5G 4096
/storage/emulated/legacy 5.6G 4.1G 1.5G 4096
/storage/emulated/legacy/Android/obb 5.6G 4.1G 1.5G 4096
Something bizarre... filesystem corruption perhaps? Crappy flash storage wearing out too quickly? Unfortunately there's no fsck.ext4 on the system, nor a way to even run it to let it do its thing without recovery, but I couldn't even do a scan.
I thought of freeing up a bit of space just to make sure, so I went and cleared the cache of some apps, deleting some temp files in /sdcard/Downloads, etc.
Something was really wrong: the free space reported by the Fire Stick, and the total being used up by all the apps was way off. Something was using disk space, and a lot of it.
I started poking around in /data to find the culprit. I ran a 'du -h' in /data to get a report as to where this space went, watching the screen fly by and twiddling my thumbs...
Code:
[...]
4.0K ./com.android.externalstorage/cache
8.0K ./com.android.externalstorage
4.0K ./com.android.systemui/cache
8.0K ./com.android.systemui
4.0K ./com.android.location.fused
4.0K ./com.android.managedprovisioning/cache
4.0K ./com.android.managedprovisioning/files
12K ./com.android.managedprovisioning
4.0K ./com.android.onetimeinitializer/cache
8.0K ./com.android.onetimeinitializer/shared_prefs
16K ./com.android.onetimeinitializer
4.0K ./com.android.proxyhandler
4.0K ./com.android.shell
8.0K ./com.kingouser.com/cache/org.chromium.android_webview/index-dir
32K ./com.kingouser.com/cache/org.chromium.android_webview
36K ./com.kingouser.com/cache
404K ./com.kingouser.com/databases
64K ./com.kingouser.com/shared_prefs
and boom, nothing. Stopped. Locked. I really thought the sdcard/filesystem was corrupt at this point, and it just couldn't read sectors any longer. I was about to give up, when the screen came back to life, about three minutes (!) later:
Code:
[b]1.3G ./com.kingouser.com/files/activesu[/b]
188K ./com.kingouser.com/files/systemoruser
60K ./com.kingouser.com/files/app
1.3G ./com.kingouser.com/files
4.0K ./com.kingouser.com/requests
16K ./com.kingouser.com/logs
4.0K ./com.kingouser.com/app_webview/paks
68K ./com.kingouser.com/app_webview
1.3G ./com.kingouser.com
4.0K ./com.android.vpndialogs
4.0K ./com.android.wallpapercropper
4.0K ./com.amazon.wcast.sink/cache
12K ./com.amazon.wcast.sink/shared_prefs
4.0K ./com.amazon.wcast.sink/files
24K ./com.amazon.wcast.sink
4.0K ./com.amazon.device.sync.sdk.internal
4.0K ./com.amazon.fireinputdevices
4.0K ./com.amazon.kindleautomatictimezone/cache
8.0K ./com.amazon.kindleautomatictimezone/shared_prefs
16K ./com.amazon.kindleautomatictimezone
4.0K ./com.amazon.ods.kindleconnect/cache
8.0K ./com.amazon.ods.kindleconnect
4.0K ./com.amazon.precog/cache
176K ./com.amazon.precog/files
184K ./com.amazon.precog
[...]
Here is a folder (with ZERO Google results (!?) ) that is 1.3 GB in size, with I-didn't-wait-long-enough-to-find-out-how-many files, almost all 338 bytes each, all with numeric names :
[spoilers]
Code:
[email protected]:/data/user/0/com.kingouser.com/files/activesu # ls -l
-rw------- u0_a21 u0_a21 626 1970-01-01 19:01 1471827349222
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1471936523207
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1472195743579
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1472195743651
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1472714150582
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1472714150705
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1472714150797
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1472714150813
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473146238917
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473146238965
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473146238970
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473146239020
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473146239150
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473146239346
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473146239355
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473146239360
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405118
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405172
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405205
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405234
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405242
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405253
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405305
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405323
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405376
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405389
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405395
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405415
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405420
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405434
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405440
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473241405447
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399087
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399095
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399101
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399106
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399114
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399120
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399124
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399137
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399436
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399445
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399570
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399733
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399768
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399791
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399799
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399806
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399813
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399818
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399847
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673399901
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400271
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400389
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400465
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400472
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400477
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400573
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400584
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400593
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400617
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400713
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400733
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473673400793
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473925624874
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473925625314
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473925625320
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473925625356
-rw------- u0_a21 u0_a21 338 2016-09-17 21:51 1473925625384
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625408
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625487
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625501
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625509
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625610
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625627
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625637
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625677
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625682
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625687
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625703
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625762
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625779
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925625787
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626027
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626197
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626222
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626277
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626285
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626293
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626423
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626471
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626489
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626499
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626505
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626519
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626526
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626566
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626593
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626600
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626606
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626613
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626623
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626638
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626648
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626656
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626660
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626666
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626671
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626675
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626681
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626702
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626733
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626748
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626753
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626760
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626767
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626776
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626791
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626796
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626805
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626835
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626841
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626858
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626863
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626872
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626877
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626882
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1473925626887
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098407967
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408311
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408319
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408324
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408329
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408336
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408341
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408347
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408352
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408408
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408450
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408456
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408470
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408480
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408489
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408542
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408549
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408554
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408562
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408569
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408575
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408595
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408653
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408819
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408860
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408893
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408899
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408904
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408909
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408921
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408932
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408936
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098408950
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409028
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409058
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409067
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409087
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409103
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409110
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409129
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409134
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409141
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409147
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409152
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409158
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409163
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409168
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409173
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409361
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409576
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409605
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409629
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409635
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409642
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409647
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409656
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409660
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409668
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409673
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409682
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409688
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409693
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409701
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409712
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409722
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409727
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409731
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409736
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409740
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409745
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409752
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409759
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409786
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409790
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409805
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409810
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409819
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409824
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409828
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409834
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409842
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409850
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409871
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409876
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409881
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409886
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409891
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409895
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409899
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409914
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409918
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409923
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409929
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409934
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409938
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409943
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409947
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409952
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409959
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409968
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409973
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409988
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409993
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098409998
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410002
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410007
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410013
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410020
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410028
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410032
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410042
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410047
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410051
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410057
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410063
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410068
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410076
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410081
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410094
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410099
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410103
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410108
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410112
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410117
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410121
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410129
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410137
-rw------- u0_a21 u0_a21 338 2016-09-17 21:52 1474098410142
[...]
[/spoilers]
Entire Contents of a random file I chose:
Code:
49b9f5d46c386bd562e8d49c9c5ba3a018f4752ef56ae9f8befde0355d3d7021508c49118c72997eda142d4c63
9df6c7882b922600c1c96d0154631491224846c48809360d44f8eaec1e4520161accc8722c001dcf1da0cae893
Kingoroot app (not Superuser) used up the entire inode table creating (millions?) small files, leaving the system unable to create necessary files for networking on boot.
I think some may get a kick out of this:
Code:
[email protected]:/data/user/0/com.kingouser.com/files/activesu # rm -r *
[b]tmp-mksh: rm: Argument list too long[/b]
Uh..
Code:
1|[email protected]:/data/user/0/com.kingouser.com/files/activesu # cd ..
[email protected]:/data/user/0/com.kingouser.com/files # ls -l
drwx------ u0_a21 u0_a21 2016-11-16 17:30 activesu
drwx------ u0_a21 u0_a21 2016-09-27 22:20 app
-rwxr-xr-x u0_a21 u0_a21 17688 2016-08-21 20:55 config
-rw-rw---- u0_a21 u0_a21 36 2016-08-21 20:55 gaClientId
-rw------- u0_a21 u0_a21 1060 1970-01-01 19:03 mylog
-rw------- u0_a21 u0_a21 256 1970-01-01 19:02 request_log
-rw------- root root 293 1970-01-01 19:02 supersu.cfg
drwx------ u0_a21 u0_a21 2016-10-24 09:31 systemoruser
[email protected]:/data/user/0/com.kingouser.com/files # rm -r activesu/
ro[email protected]:/data/user/0/com.kingouser.com/files # mkdir activesu
[email protected]:/data/user/0/com.kingouser.com/files # chown u0_a21:u0_a21 activesu/
(at this point I just wanted it working, so I put the dir/problem back in place).
Did a reboot, network back up, signed into my wireless, put everything back to how it was before I started, beer(s).
The one thing I am grateful for is that the bluetooth stack didn't depend on the same type of setup, otherwise the remote would have been dead and I would have thought it was obvious major hardware failure, power surge most likely. Cheers for that.

What to do?
Well, I'm not sure. I was thinking of perhaps downgrading to 5.0.5 and use the excellent guide to replace Kingoroot with SuperSU. I kind of like to stay up-to-date-ish on firmware, so I might try to figure out a way to replace Kingo with SuperSU on 5.2.10 but it's brick risky. I'm planning on getting a Fire Stick v2 so maybe when that happens I can carefully risk the v1 stick.
Another option: perhaps I'll just band-aid fix it by using root app Kernel Adiutor 's init script function to wipe the directory above on each boot?
I haven't really decided yet, but I just wanted to make this available to those it could (will?) happen to.
I'll edit this post with updates, if any.

@xenyz - Great detective work! I really enjoyed your write-up, too.
I have held off rooting my FTV-S with Kingoroot, waiting for a more elegant solution (tho, not sure when or if it will come).
I will hold off longer now, and just keep blocking Amazon updates on my internet connection.

¿GotJazz? said:
I have held off rooting my FTV-S with Kingoroot, waiting for a more elegant solution
Click to expand...
Click to collapse
To be clear I still think the root exploit/Xposed/mods route is entirely worth it, there just happens to be this one situation that has happened to no one else yet. I still may be entirely the reason this happened, but afaik and in good faith I doubt it.

I've done around 10 firesticks and have not had this issue. I also after installing kingoroot, I use the superme to uninstall kingo and install supersu. There has been some issues with that in if I get too jumpy and exit out and reboot, I am stuck with the amazon boot. However that can be fixed with PC rooting.

Thanks for this entertaining post. It's so nice to read from someone who knows his way around with the console and who puts xposed to a good use.

I just got a Fire stick back from a friend who experienced the exact same issue, so it wasn't an isolated case. It was set up in the same way as mine though. No matter, everyone should be migrating to rbox's prerooted ROM and FORMATTING data. Don't just wipe internal storage, format the entire thing.

I've always said that these shady rooting exploits are highly likely to be malicious and contain viruses/Trojans that steal private information. I have multiple FireTV sticks brand new in box and have been waiting for a normal rooting method, hopefully from @rbox. I am losing hope though.

E--Man said:
I've always said that these shady rooting exploits are highly likely to be malicious and contain viruses/Trojans that steal private information. I have multiple FireTV sticks brand new in box and have been waiting for a normal rooting method, hopefully from @rbox. I am losing hope though.
Click to expand...
Click to collapse
It's here, if you missed it. Look in Fire TV development section here on XDA.
It doesn't necessarily contain trojans, viruses, keyloggers, etc. although it very well could. Even SuperSU could, technically.
I never entered anything remotely important into the thing so functionality was much more important than security for me.
It was more shoddy coding that caused this runaway endless writing of files. Although in the end it stopped me from using the device, I highly doubt it was a malicious intention.
There is a very famous quote that goes
"Never attribute to malice that which is adequately explained by stupidity" - Hanlon's razor

I used to have issues with wifi after kingoroot, i solved it by cleaning dalvik and cache.

Wow that's a little disturbing. I've been using KingRoot for a few days on my Fire TV 2 and I already miss supersu...
Hopefully a better solution than KingRoot comes out at some point for the fire tv.

Antieco said:
I used to have issues with wifi after kingoroot, i solved it by cleaning dalvik and cache.
Click to expand...
Click to collapse
Please can you show me how to do this?

madmag said:
Please can you show me how to do this?
Click to expand...
Click to collapse
Yea you need to start up the fire stick in recovery mode then go through the options to clean davlik cache ive not used recovery mode on my firestick im still waiting for a root for 5.2.1.1 but im assuming its the same as any tablet or phone

Related

[HELP] I need pds.img Backup

Hello Everyone,
I found the way to make adb run on a Defy with screwed /pds partition. But of course the OS is not booting. Can somebody help me uploading a backup of your /pds partiton?. I can't found it anywhere Thanks in advance to anyone
EDIT: I don't need anymore ALL the /pds file content, but only the content of opprof folder
TheElix said:
Hello Everyone,
I found the way to make adb run on a Defy with screwed /pds partition. But of course the OS is not booting. Can somebody help me uploading a backup of your /pds partiton?. I can't found it anywhere Thanks in advance to anyone
Click to expand...
Click to collapse
Do you have a reference for what is contained in the /pds partition? Doesn't the /pds partition contain device specific information, maybe including the IMEI which we certainly don't want to share.
See this thread: http://forum.xda-developers.com/showthread.php?t=2675326
craig_comstock said:
Do you have a reference for what is contained in the /pds partition? Doesn't the /pds partition contain device specific information, maybe including the IMEI which we certainly don't want to share.
See this thread: http://forum.xda-developers.com/showthread.php?t=2675326
Click to expand...
Click to collapse
I looked at that thread but I didn't found anything useful.
BTW I found a backup online and now my Defy is booting :laugh: But, of course, the IMEI shows as 0000000000000000000 and doesn't connect to the network
There's the content of my /pds
Code:
[email protected]:/ # ls -lR /pds
/pds:
drwxrwx--- radio radio 2015-10-30 05:17 bp_nvm
drwxrwx--- radio radio 2015-10-28 06:26 comm_drv
drwxr-xr-x root root 1981-12-31 13:00 config
drwxr----- root root 2012-08-29 07:51 factory
-rw-r--r-- root root 507504 2015-10-27 06:11 hijack
drwxrwx--- root root 2015-07-05 05:41 lost+found
drwxr-xr-x root root 2015-10-28 04:21 opprof
drwxrwxr-x system shell 2015-10-27 04:42 public
drwxr-xr-x root radio 2015-07-05 05:41 scim
drwxrwx--- 9007 9007 2015-10-27 06:15 security
-rw-r--r-- root root 260184 2015-10-27 06:11 update-binary
-rw-r--r-- root root 1335532 2015-10-27 06:11 update-recovery.zip
drwxrwx--x wifi wifi 2015-10-27 06:15 wifi
drwxrwxr-x 9003 9003 2015-10-27 06:15 wmdrm
/pds/bp_nvm:
-rw-r--r-- root root 3604 2015-10-27 06:11 FILE_PDS5
-rw-r--r-- root root 1970 2015-10-27 06:11 FILE_PDS_SUBSIDY_LOCK_DBK_1
-rw-r--r-- root root 2406 2015-10-27 06:11 FILE_PDS_SUBSIDY_LOCK_DBK_2
-rw-r--r-- root root 3197 2015-10-28 04:21 File_PDS1
-rw-r--r-- root root 2276 2015-10-27 06:11 File_PDS2
-rw-r--r-- root root 4387 2015-10-28 04:21 File_PDS3
-rw-r--r-- root root 4032 2015-10-28 04:21 File_PDS4
-rw-r--r-- root root 2602 2015-10-27 06:11 File_PDS_IMEI
-rw-r--r-- root root 4482 2015-10-27 06:11 File_PDS_LTE1
-rw-r--r-- root root 6722 2015-10-27 06:11 File_PDS_LTE2
-rw-r--r-- root root 320 2015-10-28 04:21 File_PDS_SBCM
-rw-r--r-- root root 1330 2015-10-30 05:18 File_PDS_Subsidy_Lock
-rw-r--r-- root root 312 2015-10-27 06:11 NVM_Daemon_Log.txt
-rw-rw-rw- root radio 1512 2015-10-28 06:21 NVM_Daemon_MD5
-rw------- root root 32 2012-12-06 08:42 md5
/pds/comm_drv:
-rw-r--r-- root root 1 2015-10-27 06:11 cat_log_control.cfg
-rw-r--r-- root root 1 2015-10-27 06:11 cat_routing_path_control.cfg
-rw-rw-rw- root radio 2704 2015-10-28 06:26 mmins_settings.cfg
-rw-r--r-- root root 1 2015-10-27 06:11 ms_log_control.cfg
-rw-r--r-- root root 61 2015-10-27 06:11 opprof.txt
/pds/config:
-rw-r----- root root 0 1981-12-31 13:00 barcode
-rw-r----- root root 0 1981-12-31 13:00 baseband
-rw-r----- root root 0 2012-12-06 08:41 bootmode
-rw-r----- root root 1 1981-12-31 13:00 boslogcat
-rw-r----- root root 0 1981-12-31 13:00 carrier
-rw-r----- root root 0 1981-12-31 13:00 console
-rw-r----- root root 0 1981-12-31 13:00 display
-rw-r----- root root 0 1981-12-31 13:00 dtname
-rw-r----- root root 0 1981-12-31 13:00 fti
-rw-r----- root root 0 1981-12-31 13:00 hwrev
-rw-r----- root root 0 1981-12-31 13:00 model
-rw-r----- root root 0 1981-12-31 13:00 msn
/pds/factory:
-rw-r----- root root 128 2012-08-29 08:55 fti
/pds/lost+found:
/pds/opprof:
/pds/public:
drwxrwxr-x root root 1981-12-31 13:04 atvc
drwxr-x--- 9000 9000 2015-10-27 06:15 battd
-rw------- root root 5 2012-12-06 08:13 cur.locale
-rw-r--r-- root root 2 2012-08-29 07:58 tcxo.bin
/pds/public/atvc:
/pds/public/battd:
-rw-rw---- root root 10 2015-10-27 06:11 batt_offset_data
-rw-rw---- root root 12 2015-10-27 06:11 batt_phasing_data
-rw-rw---- root root 256 2015-10-27 06:11 batt_tuning_data
/pds/scim:
/pds/security:
-rw-r--r-- root 9007 4096 2015-10-27 06:11 counter.bin
-rw-r--r-- root 9007 5086 2015-10-27 06:11 janusDeviceCert.dat
-rw-rw-r-- root 9007 608 2012-09-24 17:14 keymaptable.dat
-rw-rw-r-- root 9007 110 1981-12-31 13:04 keyring.dat
-rw-r--r-- root 9007 22528 2015-10-27 06:11 system.bin
/pds/wifi:
-rw-r--r-- root root 468 2015-10-27 06:11 nvs_map.bin
-rw-rw---- root root 1113 2012-09-19 07:33 nvs_map_mac80211.bin
/pds/wmdrm:
-rw-r--r-- root root 32 2015-10-27 06:11 hashsdidmap.dat
Are some files missing?
TheElix said:
I looked at that thread but I didn't found anything useful.
BTW I found a backup online and now my Defy is booting :laugh: But, of course, the IMEI shows as 0000000000000000000 and doesn't connect to the network
There's the content of my /pds
Code:
[email protected]:/ # ls -lR /pds
/pds:
drwxrwx--- radio radio 2015-10-30 05:17 bp_nvm
drwxrwx--- radio radio 2015-10-28 06:26 comm_drv
drwxr-xr-x root root 1981-12-31 13:00 config
drwxr----- root root 2012-08-29 07:51 factory
-rw-r--r-- root root 507504 2015-10-27 06:11 hijack
drwxrwx--- root root 2015-07-05 05:41 lost+found
drwxr-xr-x root root 2015-10-28 04:21 opprof
drwxrwxr-x system shell 2015-10-27 04:42 public
drwxr-xr-x root radio 2015-07-05 05:41 scim
drwxrwx--- 9007 9007 2015-10-27 06:15 security
-rw-r--r-- root root 260184 2015-10-27 06:11 update-binary
-rw-r--r-- root root 1335532 2015-10-27 06:11 update-recovery.zip
drwxrwx--x wifi wifi 2015-10-27 06:15 wifi
drwxrwxr-x 9003 9003 2015-10-27 06:15 wmdrm
/pds/bp_nvm:
-rw-r--r-- root root 3604 2015-10-27 06:11 FILE_PDS5
-rw-r--r-- root root 1970 2015-10-27 06:11 FILE_PDS_SUBSIDY_LOCK_DBK_1
-rw-r--r-- root root 2406 2015-10-27 06:11 FILE_PDS_SUBSIDY_LOCK_DBK_2
-rw-r--r-- root root 3197 2015-10-28 04:21 File_PDS1
-rw-r--r-- root root 2276 2015-10-27 06:11 File_PDS2
-rw-r--r-- root root 4387 2015-10-28 04:21 File_PDS3
-rw-r--r-- root root 4032 2015-10-28 04:21 File_PDS4
-rw-r--r-- root root 2602 2015-10-27 06:11 File_PDS_IMEI
-rw-r--r-- root root 4482 2015-10-27 06:11 File_PDS_LTE1
-rw-r--r-- root root 6722 2015-10-27 06:11 File_PDS_LTE2
-rw-r--r-- root root 320 2015-10-28 04:21 File_PDS_SBCM
-rw-r--r-- root root 1330 2015-10-30 05:18 File_PDS_Subsidy_Lock
-rw-r--r-- root root 312 2015-10-27 06:11 NVM_Daemon_Log.txt
-rw-rw-rw- root radio 1512 2015-10-28 06:21 NVM_Daemon_MD5
-rw------- root root 32 2012-12-06 08:42 md5
/pds/comm_drv:
-rw-r--r-- root root 1 2015-10-27 06:11 cat_log_control.cfg
-rw-r--r-- root root 1 2015-10-27 06:11 cat_routing_path_control.cfg
-rw-rw-rw- root radio 2704 2015-10-28 06:26 mmins_settings.cfg
-rw-r--r-- root root 1 2015-10-27 06:11 ms_log_control.cfg
-rw-r--r-- root root 61 2015-10-27 06:11 opprof.txt
/pds/config:
-rw-r----- root root 0 1981-12-31 13:00 barcode
-rw-r----- root root 0 1981-12-31 13:00 baseband
-rw-r----- root root 0 2012-12-06 08:41 bootmode
-rw-r----- root root 1 1981-12-31 13:00 boslogcat
-rw-r----- root root 0 1981-12-31 13:00 carrier
-rw-r----- root root 0 1981-12-31 13:00 console
-rw-r----- root root 0 1981-12-31 13:00 display
-rw-r----- root root 0 1981-12-31 13:00 dtname
-rw-r----- root root 0 1981-12-31 13:00 fti
-rw-r----- root root 0 1981-12-31 13:00 hwrev
-rw-r----- root root 0 1981-12-31 13:00 model
-rw-r----- root root 0 1981-12-31 13:00 msn
/pds/factory:
-rw-r----- root root 128 2012-08-29 08:55 fti
/pds/lost+found:
/pds/opprof:
/pds/public:
drwxrwxr-x root root 1981-12-31 13:04 atvc
drwxr-x--- 9000 9000 2015-10-27 06:15 battd
-rw------- root root 5 2012-12-06 08:13 cur.locale
-rw-r--r-- root root 2 2012-08-29 07:58 tcxo.bin
/pds/public/atvc:
/pds/public/battd:
-rw-rw---- root root 10 2015-10-27 06:11 batt_offset_data
-rw-rw---- root root 12 2015-10-27 06:11 batt_phasing_data
-rw-rw---- root root 256 2015-10-27 06:11 batt_tuning_data
/pds/scim:
/pds/security:
-rw-r--r-- root 9007 4096 2015-10-27 06:11 counter.bin
-rw-r--r-- root 9007 5086 2015-10-27 06:11 janusDeviceCert.dat
-rw-rw-r-- root 9007 608 2012-09-24 17:14 keymaptable.dat
-rw-rw-r-- root 9007 110 1981-12-31 13:04 keyring.dat
-rw-r--r-- root 9007 22528 2015-10-27 06:11 system.bin
/pds/wifi:
-rw-r--r-- root root 468 2015-10-27 06:11 nvs_map.bin
-rw-rw---- root root 1113 2012-09-19 07:33 nvs_map_mac80211.bin
/pds/wmdrm:
-rw-r--r-- root root 32 2015-10-27 06:11 hashsdidmap.dat
Are some files missing?
Click to expand...
Click to collapse
This is what I have
Code:
# cd /pds
# ls -lR
.:
drwxrwx--- 2 radio radio 1024 Oct 30 09:09 bp_nvm
drwxrwx--- 2 radio radio 1024 Oct 30 08:35 comm_drv
drwxrwx--- 2 root root 1024 Sep 22 2010 lost+found
drwxrwx--- 2 radio shell 1024 Dec 26 2012 opprof
drwxrwxr-x 3 system shell 1024 Dec 31 1969 public
drwxrwx--- 2 root radio 1024 Dec 31 1969 scim
drwxrws--- 2 system system 1024 Nov 10 2010 security
drwxrwx--x 2 wifi wifi 1024 Dec 31 1969 wifi
drwxrwxr-x 2 9003 9003 1024 Jan 16 2011 wmdrm
./bp_nvm:
-rw-rw---- 1 radio radio 3604 Dec 31 1969 FILE_PDS5
-rw-rw---- 1 radio radio 1970 Dec 31 1969 FILE_PDS_SUBSIDY_LOCK_DBK_1
-rw-rw---- 1 radio radio 2406 Dec 31 1969 FILE_PDS_SUBSIDY_LOCK_DBK_2
-rw-rw---- 1 radio radio 3197 Oct 28 16:44 File_PDS1
-rw-rw---- 1 radio radio 2276 Dec 31 1969 File_PDS2
-rw-rw---- 1 radio radio 4387 Dec 25 2012 File_PDS3
-rw-rw---- 1 radio radio 4032 Dec 25 2012 File_PDS4
-rw-rw---- 1 radio radio 2602 Dec 31 1969 File_PDS_IMEI
-rw-rw---- 1 radio radio 4482 Dec 31 1969 File_PDS_LTE1
-rw-rw---- 1 radio radio 6722 Dec 31 1969 File_PDS_LTE2
-rw-rw---- 1 radio radio 320 Dec 25 2012 File_PDS_SBCM
-rw------- 1 radio radio 1330 Oct 30 11:09 File_PDS_Subsidy_Lock
-rw-rw-rw- 1 radio radio 1599 Dec 25 2012 NVM_Daemon_MD5
./comm_drv:
-rw-rw-rw- 1 root radio 1 Dec 31 1969 cat_log_control.cfg
-rw-rw-rw- 1 root radio 1 Dec 31 1969 cat_routing_path_control.cfg
-rw-rw-rw- 1 root radio 2990 Oct 30 08:35 mmins_settings.cfg
-rw-rw-rw- 1 root radio 1 Dec 31 1969 ms_log_control.cfg
-rw-rw-rw- 1 root radio 61 Oct 29 17:38 opprof.txt
./lost+found:
./opprof:
-rw-rw-r-- 1 root radio 15996 Oct 30 06:36 2G_CALL_DROP_2g_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 3G_CALL_DROP_3g_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 3G_CALL_DROP_3g_csd_t_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 3G_CALL_DROP_3g_csv_nt_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 3G_CALL_DROP_3g_psd_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 MMINS_cc_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 304 Oct 30 06:36 MMINS_count_file.bin
-rw-rw-r-- 1 root radio 228 Oct 30 06:36 MMINS_timer_file.bin
-rw-rw-r-- 1 root radio 588 Oct 30 06:36 RRC_MM_CM_count_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 STACK_PROFILING_stack_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 STACK_RECOVERY_engine_recovery_debug_info_generic_file.bin
-rw-rw-r-- 1 root radio 2016 Oct 30 06:36 opprof_error_log.bin
-rw-rw-r-- 1 root radio 208 Oct 30 06:36 opprof_info_file.bin
./public:
drwxr-x--- 2 9000 9000 1024 Dec 31 1969 battd
-rw-r--r-- 1 root radio 2 Dec 31 1969 tcxo.bin
./public/battd:
-rw-rw---- 1 9000 9000 10 Dec 31 1969 batt_offset_data
-rw-rw---- 1 9000 9000 12 Dec 31 1969 batt_phasing_data
-rw-rw---- 1 9000 9000 256 Dec 31 1969 batt_tuning_data
./scim:
./security:
-rw------- 1 root 9007 4096 Nov 10 2010 counter.bin
-rw-rw-r-- 1 9004 9007 5086 Nov 10 2010 janusDeviceCert.dat
-rw-rw-r-- 1 root 9007 333 Nov 10 2010 keymaptable.dat
-rw------- 1 root 9007 22528 Nov 10 2010 system.bin
./wifi:
-rw-rw-rw- 1 9004 9004 468 Dec 31 1969 nvs_map.bin
./wmdrm:
-rw-rw-rw- 1 app_46 9003 32 Sep 5 2012 hashsdidmap.dat
---------- Post added at 11:49 AM ---------- Previous post was at 11:33 AM ----------
There is some info about pds and IMEI here:
http://forum.xda-developers.com/moto-x-2014/help/wip-frequently-questions-moto-x-2014-t2876769
and here:
http://forum.xda-developers.com/showthread.php?p=52648789#post52648789
working solution from that last one is this... have you tried something like it?
3. working solution (at least for me):
Remove sim, flash stock firmware using standard methods, boot to home screen, power off, insert sim, reboot and your IMEI should be back!
Click to expand...
Click to collapse
craig_comstock said:
This is what I have
Code:
# cd /pds
# ls -lR
.:
drwxrwx--- 2 radio radio 1024 Oct 30 09:09 bp_nvm
drwxrwx--- 2 radio radio 1024 Oct 30 08:35 comm_drv
drwxrwx--- 2 root root 1024 Sep 22 2010 lost+found
drwxrwx--- 2 radio shell 1024 Dec 26 2012 opprof
drwxrwxr-x 3 system shell 1024 Dec 31 1969 public
drwxrwx--- 2 root radio 1024 Dec 31 1969 scim
drwxrws--- 2 system system 1024 Nov 10 2010 security
drwxrwx--x 2 wifi wifi 1024 Dec 31 1969 wifi
drwxrwxr-x 2 9003 9003 1024 Jan 16 2011 wmdrm
./bp_nvm:
-rw-rw---- 1 radio radio 3604 Dec 31 1969 FILE_PDS5
-rw-rw---- 1 radio radio 1970 Dec 31 1969 FILE_PDS_SUBSIDY_LOCK_DBK_1
-rw-rw---- 1 radio radio 2406 Dec 31 1969 FILE_PDS_SUBSIDY_LOCK_DBK_2
-rw-rw---- 1 radio radio 3197 Oct 28 16:44 File_PDS1
-rw-rw---- 1 radio radio 2276 Dec 31 1969 File_PDS2
-rw-rw---- 1 radio radio 4387 Dec 25 2012 File_PDS3
-rw-rw---- 1 radio radio 4032 Dec 25 2012 File_PDS4
-rw-rw---- 1 radio radio 2602 Dec 31 1969 File_PDS_IMEI
-rw-rw---- 1 radio radio 4482 Dec 31 1969 File_PDS_LTE1
-rw-rw---- 1 radio radio 6722 Dec 31 1969 File_PDS_LTE2
-rw-rw---- 1 radio radio 320 Dec 25 2012 File_PDS_SBCM
-rw------- 1 radio radio 1330 Oct 30 11:09 File_PDS_Subsidy_Lock
-rw-rw-rw- 1 radio radio 1599 Dec 25 2012 NVM_Daemon_MD5
./comm_drv:
-rw-rw-rw- 1 root radio 1 Dec 31 1969 cat_log_control.cfg
-rw-rw-rw- 1 root radio 1 Dec 31 1969 cat_routing_path_control.cfg
-rw-rw-rw- 1 root radio 2990 Oct 30 08:35 mmins_settings.cfg
-rw-rw-rw- 1 root radio 1 Dec 31 1969 ms_log_control.cfg
-rw-rw-rw- 1 root radio 61 Oct 29 17:38 opprof.txt
./lost+found:
./opprof:
-rw-rw-r-- 1 root radio 15996 Oct 30 06:36 2G_CALL_DROP_2g_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 3G_CALL_DROP_3g_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 3G_CALL_DROP_3g_csd_t_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 3G_CALL_DROP_3g_csv_nt_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 3G_CALL_DROP_3g_psd_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 MMINS_cc_call_drop_generic_file.bin
-rw-rw-r-- 1 root radio 304 Oct 30 06:36 MMINS_count_file.bin
-rw-rw-r-- 1 root radio 228 Oct 30 06:36 MMINS_timer_file.bin
-rw-rw-r-- 1 root radio 588 Oct 30 06:36 RRC_MM_CM_count_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 STACK_PROFILING_stack_generic_file.bin
-rw-rw-r-- 1 root radio 224 Oct 30 06:36 STACK_RECOVERY_engine_recovery_debug_info_generic_file.bin
-rw-rw-r-- 1 root radio 2016 Oct 30 06:36 opprof_error_log.bin
-rw-rw-r-- 1 root radio 208 Oct 30 06:36 opprof_info_file.bin
./public:
drwxr-x--- 2 9000 9000 1024 Dec 31 1969 battd
-rw-r--r-- 1 root radio 2 Dec 31 1969 tcxo.bin
./public/battd:
-rw-rw---- 1 9000 9000 10 Dec 31 1969 batt_offset_data
-rw-rw---- 1 9000 9000 12 Dec 31 1969 batt_phasing_data
-rw-rw---- 1 9000 9000 256 Dec 31 1969 batt_tuning_data
./scim:
./security:
-rw------- 1 root 9007 4096 Nov 10 2010 counter.bin
-rw-rw-r-- 1 9004 9007 5086 Nov 10 2010 janusDeviceCert.dat
-rw-rw-r-- 1 root 9007 333 Nov 10 2010 keymaptable.dat
-rw------- 1 root 9007 22528 Nov 10 2010 system.bin
./wifi:
-rw-rw-rw- 1 9004 9004 468 Dec 31 1969 nvs_map.bin
./wmdrm:
-rw-rw-rw- 1 app_46 9003 32 Sep 5 2012 hashsdidmap.dat
---------- Post added at 11:49 AM ---------- Previous post was at 11:33 AM ----------
There is some info about pds and IMEI here:
http://forum.xda-developers.com/moto-x-2014/help/wip-frequently-questions-moto-x-2014-t2876769
and here:
http://forum.xda-developers.com/showthread.php?p=52648789#post52648789
working solution from that last one is this... have you tried something like it?
Click to expand...
Click to collapse
I tried it but it didn't worked BTW I think that the problem may be the missing opprof folder....

Unable to get cellular service on hand-built AOSP ROM

I am trying to build an absolute bare-bones ROM myself from AOSP for my Google Fi 6P. I realize PureNexus and others exist, but I want to learn how to do this sort of thing for myself and get a better understanding of the process, vs always having to rely on others to create roms for me that are -almost- what I want.
This is my first ROM attempt so it is entirely possible I am doing something stupid.
First I reverted everything to stock using latest MDB08M img files from: dl.google.com/dl/android/aosp/angler-mdb08m-factory-dbc17940.tgz
Going by the AOSP docs I setup repo then did:
Code:
> repo init -u https://android.googlesource.com/platform/manifest -b android-6.0.0_r26
> repo sync
> lunch aosp_angler-userdebug
> make -j4
> fastboot -w flashall
I then grabbed the vendor.img from the angler-mdb08m-factory-dbc17940.tgz and did:
Code:
> fastboot -w flash vendor vendor.img
Phone boots up, however I get the "There was an internal problem with your device" error. I also have no cellular radio support at all. "No Sim Card - No service".
Tried factory reset, wipe cache etc. No change.
Are there additional blobs I need beyond the stock vendor.img? If anyone could point me in the right direction I would super appreciate it.
So some more info that might be useful.
I mounted the AOSP built image (system-aosp.img) and the image found in angler-mdb08m-factory-dbc17940.tgz (system-google.img).
I then searched for all files that exist in system-google.img but do not exist in system-aosp.img.
Code:
> for file in $(diff <(find system-google/ -type f -o -type l | sed 's#^[a-z-]\+/##g') <(find system-aosp/ -type f -o -type l | sed 's#^[a-z-]\+/##g') | egrep '^<' | sed 's/^< //g'); do ls -lahgG --time-style=+"" system-google/$file; done | column -t
-rw-r--r-- 1 9.7K system-google/app/CABLService/CABLService.apk
-rw-r--r-- 1 45K system-google/app/CABLService/oat/arm64/CABLService.odex
-rw-r--r-- 1 588K system-google/app/CalculatorGoogle/CalculatorGoogle.apk
-rw-r--r-- 1 1.9M system-google/app/CalculatorGoogle/oat/arm64/CalculatorGoogle.odex
-rw-r--r-- 1 15M system-google/app/CalendarGooglePrebuilt/CalendarGooglePrebuilt.apk
-rw-r--r-- 1 14M system-google/app/CalendarGooglePrebuilt/oat/arm64/CalendarGooglePrebuilt.odex
-rw-r--r-- 1 62M system-google/app/Chrome/Chrome.apk
lrw-r--r-- 1 43 system-google/app/Chrome/lib/arm64/libchromium_android_linker.so -> /system/lib64/libchromium_android_linker.so
-rw-r--r-- 1 15M system-google/app/Chrome/oat/arm64/Chrome.odex
-rw-r--r-- 1 2.3M system-google/app/CloudPrint2/CloudPrint2.apk
-rw-r--r-- 1 9.2M system-google/app/CloudPrint2/oat/arm64/CloudPrint2.odex
-rw-r--r-- 1 1.7M system-google/app/DMAgent/DMAgent.apk
-rw-r--r-- 1 4.3M system-google/app/DMAgent/oat/arm64/DMAgent.odex
-rw-r--r-- 1 14M system-google/app/Drive/Drive.apk
-rw-r--r-- 1 22M system-google/app/Drive/oat/arm64/Drive.odex
-rw-r--r-- 1 531K system-google/app/FaceLock/FaceLock.apk
lrw-r--r-- 1 32 system-google/app/FaceLock/lib/arm64/libfacelock_jni.so -> /system/lib64/libfacelock_jni.so
-rw-r--r-- 1 173K system-google/app/FaceLock/oat/arm64/FaceLock.odex
-rw-r--r-- 1 41M system-google/app/GoogleCamera/GoogleCamera.apk
-rw-r--r-- 1 20M system-google/app/GoogleCamera/oat/arm64/GoogleCamera.odex
-rw-r--r-- 1 30K system-google/app/GoogleContactsSyncAdapter/GoogleContactsSyncAdapter.apk
-rw-r--r-- 1 1.7M system-google/app/GoogleContactsSyncAdapter/oat/arm64/GoogleContactsSyncAdapter.odex
-rw-r--r-- 1 12M system-google/app/GoogleHindiIME/GoogleHindiIME.apk
-rw-r--r-- 1 5.0M system-google/app/GoogleHindiIME/oat/arm64/GoogleHindiIME.odex
-rw-r--r-- 1 15M system-google/app/GoogleHome/GoogleHome.apk
-rw-r--r-- 1 37K system-google/app/GoogleHome/oat/arm64/GoogleHome.odex
-rw-r--r-- 1 15M system-google/app/GoogleJapaneseInput/GoogleJapaneseInput.apk
-rw-r--r-- 1 5.6M system-google/app/GoogleJapaneseInput/oat/arm64/GoogleJapaneseInput.odex
-rw-r--r-- 1 11M system-google/app/GooglePinyinIME/GooglePinyinIME.apk
-rw-r--r-- 1 5.4M system-google/app/GooglePinyinIME/oat/arm64/GooglePinyinIME.odex
-rw-r--r-- 1 7.1M system-google/app/GoogleTTS/GoogleTTS.apk
-rw-r--r-- 1 14M system-google/app/GoogleTTS/oat/arm64/GoogleTTS.odex
-rw-r--r-- 1 18M system-google/app/Hangouts/Hangouts.apk
-rw-r--r-- 1 23M system-google/app/Hangouts/oat/arm/Hangouts.odex
-rw-r--r-- 1 3.3M system-google/app/HwMMITest/HwMMITest.apk
lrw-r--r-- 1 31 system-google/app/HwMMITest/lib/arm64/libManufacture.so -> /system/lib64/libManufacture.so
-rw-r--r-- 1 413K system-google/app/HwMMITest/oat/arm64/HwMMITest.odex
-rw-r--r-- 1 4.2K system-google/app/HwSarControlService/HwSarControlService.apk
-rw-r--r-- 1 161K system-google/app/HwSarControlService/oat/arm64/HwSarControlService.odex
-rw-r--r-- 1 7.9M system-google/app/KoreanIME/KoreanIME.apk
-rw-r--r-- 1 4.1M system-google/app/KoreanIME/oat/arm64/KoreanIME.odex
-rw-r--r-- 1 22M system-google/app/LatinImeGoogle/LatinImeGoogle.apk
lrw-r--r-- 1 39 system-google/app/LatinImeGoogle/lib/arm64/libjni_keyboarddecoder.so -> /system/lib64/libjni_keyboarddecoder.so
lrw-r--r-- 1 38 system-google/app/LatinImeGoogle/lib/arm64/libjni_latinimegoogle.so -> /system/lib64/libjni_latinimegoogle.so
-rw-r--r-- 1 5.3M system-google/app/LatinImeGoogle/oat/arm64/LatinImeGoogle.odex
-rw-r--r-- 1 14M system-google/app/Maps/Maps.apk
-rw-r--r-- 1 56M system-google/app/Maps/oat/arm64/Maps.odex
-rw-r--r-- 1 13M system-google/app/Music2/Music2.apk
-rw-r--r-- 1 30M system-google/app/Music2/oat/arm64/Music2.odex
-rw-r--r-- 1 3.4K system-google/app/PartnerBookmarksProvider/PartnerBookmarksProvider.apk
-rw-r--r-- 1 109K system-google/app/PartnerBookmarksProvider/oat/arm64/PartnerBookmarksProvider.odex
-rw-r--r-- 1 24M system-google/app/Photos/Photos.apk
-rw-r--r-- 1 27M system-google/app/Photos/oat/arm/Photos.odex
-rw-r--r-- 1 3.7K system-google/app/PlayAutoInstallConfig/PlayAutoInstallConfig.apk
-rw-r--r-- 1 13K system-google/app/PlayAutoInstallConfig/oat/arm/PlayAutoInstallConfig.odex
-rw-r--r-- 1 13K system-google/app/PlayAutoInstallConfig/oat/arm64/PlayAutoInstallConfig.odex
-rw-r--r-- 1 11M system-google/app/PlayGames/PlayGames.apk
-rw-r--r-- 1 21M system-google/app/PlayGames/oat/arm64/PlayGames.odex
-rw-r--r-- 1 9.5M system-google/app/PrebuiltBugle/PrebuiltBugle.apk
-rw-r--r-- 1 15M system-google/app/PrebuiltBugle/oat/arm/PrebuiltBugle.odex
-rw-r--r-- 1 3.1M system-google/app/PrebuiltDeskClockGoogle/PrebuiltDeskClockGoogle.apk
-rw-r--r-- 1 6.0M system-google/app/PrebuiltDeskClockGoogle/oat/arm64/PrebuiltDeskClockGoogle.odex
-rw-r--r-- 1 788K system-google/app/PrebuiltExchange3Google/PrebuiltExchange3Google.apk
-rw-r--r-- 1 9.0M system-google/app/PrebuiltExchange3Google/oat/arm64/PrebuiltExchange3Google.odex
-rw-r--r-- 1 8.5M system-google/app/PrebuiltGmail/PrebuiltGmail.apk
-rw-r--r-- 1 18M system-google/app/PrebuiltGmail/oat/arm64/PrebuiltGmail.odex
-rw-r--r-- 1 1.8M system-google/app/SetupSmartDeviceOverlay/SetupSmartDeviceOverlay.apk
-rw-r--r-- 1 8.8K system-google/app/SetupSmartDeviceOverlay/oat/arm64/SetupSmartDeviceOverlay.odex
-rw-r--r-- 1 110K system-google/app/Stk/Stk.apk
-rw-r--r-- 1 269K system-google/app/Stk/oat/arm64/Stk.odex
-rw-r--r-- 1 2.7K system-google/app/TimeService/TimeService.apk
-rw-r--r-- 1 13K system-google/app/TimeService/oat/arm64/TimeService.odex
-rw-r--r-- 1 1.7M system-google/app/Tycho/Tycho.apk
-rw-r--r-- 1 12M system-google/app/Tycho/oat/arm64/Tycho.odex
-rw-r--r-- 1 5.0M system-google/app/Videos/Videos.apk
-rw-r--r-- 1 18M system-google/app/Videos/oat/arm64/Videos.odex
-rw-r--r-- 1 4.5M system-google/app/Wallet/Wallet.apk
-rw-r--r-- 1 22M system-google/app/Wallet/oat/arm64/Wallet.odex
-rw-r--r-- 1 84M system-google/app/WebViewGoogle/WebViewGoogle.apk
-rw-r--r-- 1 2.8M system-google/app/WebViewGoogle/oat/arm/WebViewGoogle.odex
-rw-r--r-- 1 3.2M system-google/app/WebViewGoogle/oat/arm64/WebViewGoogle.odex
-rw-r--r-- 1 13M system-google/app/YouTube/YouTube.apk
-rw-r--r-- 1 26M system-google/app/YouTube/oat/arm/YouTube.odex
-rw-r--r-- 1 30M system-google/app/YouTube/oat/arm64/YouTube.odex
-rw-r--r-- 1 129K system-google/app/qcrilmsgtunnel/oat/arm64/qcrilmsgtunnel.odex
-rw-r--r-- 1 2.9K system-google/app/qcrilmsgtunnel/qcrilmsgtunnel.apk
-rw-r--r-- 1 4.1M system-google/app/talkback/oat/arm64/talkback.odex
-rw-r--r-- 1 4.4M system-google/app/talkback/talkback.apk
-rwxr-xr-x 1 35K system-google/bin/ATFWD-daemon
-rwxr-xr-x 1 9.9K system-google/bin/InputEventFind
-rwxr-xr-x 1 10K system-google/bin/PktRspTest
-rwxr-xr-x 1 9.9K system-google/bin/cnd
-rwxr-xr-x 1 14K system-google/bin/diag_callback_client
-rwxr-xr-x 1 18K system-google/bin/diag_dci_sample
-rwxr-xr-x 1 10K system-google/bin/diag_klog
-rwxr-xr-x 1 23K system-google/bin/diag_mdlog
-rwxr-xr-x 1 19K system-google/bin/diag_qshrink4_daemon
-rwxr-xr-x 1 23K system-google/bin/diag_socket_log
-rwxr-xr-x 1 15K system-google/bin/diag_uart_log
-rwxr-xr-x 1 14K system-google/bin/dsm_ctrl
-rwxr-xr-x 1 38K system-google/bin/fingerprintd
-rwxr-xr-x 1 58K system-google/bin/ims_rtp_daemon
-rwxr-xr-x 1 5.8K system-google/bin/imscmservice
-rwxr-xr-x 1 158K system-google/bin/imsdatadaemon
-rwxr-xr-x 1 118K system-google/bin/imsqmidaemon
-rwxr-x--- 1 679 system-google/bin/install-recovery.sh
-rwxr-xr-x 1 9.9K system-google/bin/irsc_util
-rwxr-xr-x 1 34K system-google/bin/loc_launcher
-rwxr-xr-x 1 147K system-google/bin/mm-pp-daemon
-rwxr-xr-x 1 22K system-google/bin/mm-qjpeg-dec-test
-rwxr-xr-x 1 22K system-google/bin/mm-qjpeg-enc-test
-rwxr-xr-x 1 30K system-google/bin/mm-qomx-idec-test
-rwxr-xr-x 1 34K system-google/bin/mm-qomx-ienc-test
-rwxr-xr-x 1 26K system-google/bin/msm_irqbalance
-rwxr-xr-x 1 561K system-google/bin/netmgrd
-rwxr-xr-x 1 5.8K system-google/bin/nl_listener
-rwxr-xr-x 1 97K system-google/bin/perfd
-rwxr-xr-x 1 9.9K system-google/bin/pm-proxy
-rwxr-xr-x 1 43K system-google/bin/pm-service
-rwxr-xr-x 1 22K system-google/bin/port-bridge
-rwxr-xr-x 1 22K system-google/bin/qjpeg-dma-test
-rwx------ 1 142K system-google/bin/qmuxd
-rwxr-xr-x 1 50K system-google/bin/radish
-rwxr-xr-x 1 31K system-google/bin/rmt_storage
-rwxr-xr-x 1 9.9K system-google/bin/ssr_setup
-rwxr-xr-x 1 26K system-google/bin/subsystem_ramdump
-rwxr-xr-x 1 14K system-google/bin/test_diag
-rwxr-xr-x 1 22K system-google/bin/test_module_pproc
-rwxr-xr-x 1 1.8M system-google/bin/thermal-engine
-rwxr-xr-x 1 26K system-google/bin/time_daemon
lrwxr-xr-x 1 7 system-google/bin/watchprops -> toolbox
-rw-r--r-- 1 68K system-google/etc/acdbdata/Fluid/Fluid_Bluetooth_cal.acdb
-rw-r--r-- 1 18K system-google/etc/acdbdata/Fluid/Fluid_General_cal.acdb
-rw-r--r-- 1 5.2K system-google/etc/acdbdata/Fluid/Fluid_Global_cal.acdb
-rw-r--r-- 1 239K system-google/etc/acdbdata/Fluid/Fluid_Handset_cal.acdb
-rw-r--r-- 1 1.5K system-google/etc/acdbdata/Fluid/Fluid_Hdmi_cal.acdb
-rw-r--r-- 1 123K system-google/etc/acdbdata/Fluid/Fluid_Headset_cal.acdb
-rw-r--r-- 1 312K system-google/etc/acdbdata/Fluid/Fluid_Speaker_cal.acdb
-rw-r--r-- 1 68K system-google/etc/acdbdata/Liquid/Liquid_Bluetooth_cal.acdb
-rw-r--r-- 1 18K system-google/etc/acdbdata/Liquid/Liquid_General_cal.acdb
-rw-r--r-- 1 5.2K system-google/etc/acdbdata/Liquid/Liquid_Global_cal.acdb
-rw-r--r-- 1 239K system-google/etc/acdbdata/Liquid/Liquid_Handset_cal.acdb
-rw-r--r-- 1 3.5K system-google/etc/acdbdata/Liquid/Liquid_Hdmi_cal.acdb
-rw-r--r-- 1 123K system-google/etc/acdbdata/Liquid/Liquid_Headset_cal.acdb
-rw-r--r-- 1 312K system-google/etc/acdbdata/Liquid/Liquid_Speaker_cal.acdb
-rw-r--r-- 1 67K system-google/etc/acdbdata/MTP/MTP_Bluetooth_cal.acdb
-rw-r--r-- 1 18K system-google/etc/acdbdata/MTP/MTP_General_cal.acdb
-rw-r--r-- 1 5.2K system-google/etc/acdbdata/MTP/MTP_Global_cal.acdb
-rw-r--r-- 1 255K system-google/etc/acdbdata/MTP/MTP_Handset_cal.acdb
-rw-r--r-- 1 1.5K system-google/etc/acdbdata/MTP/MTP_Hdmi_cal.acdb
-rw-r--r-- 1 126K system-google/etc/acdbdata/MTP/MTP_Headset_cal.acdb
-rw-r--r-- 1 330K system-google/etc/acdbdata/MTP/MTP_Speaker_cal.acdb
-rw-r--r-- 1 97K system-google/etc/acdbdata/angler/Angler_Bluetooth_cal.acdb
-rw-r--r-- 1 18K system-google/etc/acdbdata/angler/Angler_General_cal.acdb
-rw-r--r-- 1 5.3K system-google/etc/acdbdata/angler/Angler_Global_cal.acdb
-rw-r--r-- 1 447K system-google/etc/acdbdata/angler/Angler_Handset_cal.acdb
-rw-r--r-- 1 1.5K system-google/etc/acdbdata/angler/Angler_Hdmi_cal.acdb
-rw-r--r-- 1 183K system-google/etc/acdbdata/angler/Angler_Headset_cal.acdb
-rw-r--r-- 1 495K system-google/etc/acdbdata/angler/Angler_Speaker_cal.acdb
-rw-r--r-- 1 18 system-google/etc/cne/profile.txt
-rw-r--r-- 1 6.8K system-google/etc/data/dsi_config.xml
-rw-r--r-- 1 17K system-google/etc/data/netmgr_config.xml
-rw-r--r-- 1 8.7K system-google/etc/data/qmi_config.xml
lrw-r--r-- 1 32 system-google/etc/firmware/wcd9320/wcd9320_anc.bin -> /data/misc/audio/wcd9320_anc.bin
lrw-r--r-- 1 38 system-google/etc/firmware/wcd9320/wcd9320_mad_audio.bin -> /data/misc/audio/wcd9320_mad_audio.bin
lrw-r--r-- 1 25 system-google/etc/firmware/wcd9320/wcd9320_mbhc.bin -> /data/misc/audio/mbhc.bin
-rw-r--r-- 1 1.8K system-google/etc/flp.conf
-rw-r--r-- 1 3.2K system-google/etc/gps.conf
-rw-r--r-- 1 4.7K system-google/etc/izat.conf
-rw-r--r-- 1 1.7K system-google/etc/lowi.conf
-rw-r--r-- 1 643K system-google/etc/old-apns-conf.xml
-rw-r--r-- 1 298 system-google/etc/permissions/cneapiclient.xml
-rw-r--r-- 1 158 system-google/etc/permissions/com.android.omadm.service.xml
-rw-r--r-- 1 850 system-google/etc/permissions/com.google.android.camera.experimental2015.xml
-rw-r--r-- 1 161 system-google/etc/permissions/com.google.android.dialer.support.xml
-rw-r--r-- 1 816 system-google/etc/permissions/com.google.android.maps.xml
-rw-r--r-- 1 835 system-google/etc/permissions/com.google.android.media.effects.xml
-rw-r--r-- 1 261 system-google/etc/permissions/com.google.widevine.software.drm.xml
-rw-r--r-- 1 159 system-google/etc/permissions/qcrilhook.xml
-rw-r--r-- 1 1.6M system-google/etc/pp_calib_data_SAMSUNG_S6E3HA3X01_5P7_1440P_CMD_DUAL0.xml
-rw-r--r-- 1 5.1K system-google/etc/preferred-apps/google.xml
-rw-r--r-- 1 1.7K system-google/etc/sap.conf
-rw-r--r-- 1 1.9K system-google/etc/sysconfig/google.xml
-rw-r--r-- 1 1.4K system-google/etc/sysconfig/google_build.xml
-rw-r--r-- 1 834 system-google/etc/sysconfig/whitelist_com.android.omadm.service.xml
-rw-r--r-- 1 857 system-google/etc/updatecmds/google_generic_update.txt
-rw-r--r-- 1 309 system-google/framework/com.android.nfc_extras.jar
-rw-r--r-- 1 309 system-google/framework/com.google.android.camera.experimental2015.jar
-rw-r--r-- 1 309 system-google/framework/com.google.android.dialer.support.jar
-rw-r--r-- 1 309 system-google/framework/com.google.android.maps.jar
-rw-r--r-- 1 309 system-google/framework/com.google.android.media.effects.jar
-rw-r--r-- 1 309 system-google/framework/com.google.widevine.software.drm.jar
-rw-r--r-- 1 29K system-google/framework/oat/arm/com.android.nfc_extras.odex
-rw-r--r-- 1 13K system-google/framework/oat/arm/com.google.android.camera.experimental2015.odex
-rw-r--r-- 1 13K system-google/framework/oat/arm/com.google.android.dialer.support.odex
-rw-r--r-- 1 861K system-google/framework/oat/arm/com.google.android.maps.odex
-rw-r--r-- 1 201K system-google/framework/oat/arm/com.google.android.media.effects.odex
-rw-r--r-- 1 13K system-google/framework/oat/arm/com.google.widevine.software.drm.odex
-rw-r--r-- 1 357K system-google/framework/oat/arm/qcrilhook.odex
-rw-r--r-- 1 29K system-google/framework/oat/arm64/com.android.nfc_extras.odex
-rw-r--r-- 1 13K system-google/framework/oat/arm64/com.google.android.camera.experimental2015.odex
-rw-r--r-- 1 13K system-google/framework/oat/arm64/com.google.android.dialer.support.odex
-rw-r--r-- 1 981K system-google/framework/oat/arm64/com.google.android.maps.odex
-rw-r--r-- 1 229K system-google/framework/oat/arm64/com.google.android.media.effects.odex
-rw-r--r-- 1 13K system-google/framework/oat/arm64/com.google.widevine.software.drm.odex
-rw-r--r-- 1 425K system-google/framework/oat/arm64/qcrilhook.odex
-rw-r--r-- 1 309 system-google/framework/qcrilhook.jar
-rw-r--r-- 1 34K system-google/lib/hw/gps.msm8994.so
-rw-r--r-- 1 427K system-google/lib/libdmengine.so
-rw-r--r-- 1 318K system-google/lib/libdmjavaplugin.so
-rw-r--r-- 1 531K system-google/lib/libfilterpack_facedetect.so
-rw-r--r-- 1 36K system-google/lib/libgps.utils.so
-rw-r--r-- 1 127K system-google/lib/libloc_api_v02.so
-rw-r--r-- 1 52K system-google/lib/libloc_core.so
-rw-r--r-- 1 26K system-google/lib/libloc_ds_api.so
-rw-r--r-- 1 125K system-google/lib/libloc_eng.so
-rw-r--r-- 1 94K system-google/lib/libmm-qcamera.so
-rw-r--r-- 1 9.1M system-google/lib/libpatts_engine_jni_api.so
-rw-r--r-- 1 154K system-google/lib/libspeexwrapper.so
-rw-r--r-- 1 42K system-google/lib/libtinyxml.so
-rw-r--r-- 1 126K system-google/lib/soundfx/libfmas.so
-rw-r--r-- 1 34K system-google/lib64/hw/gps.msm8994.so
-rw-r--r-- 1 9.8K system-google/lib64/libManufacture.so
-rw-r--r-- 1 82K system-google/lib64/libchromium_android_linker.so
-rw-r--r-- 1 2.0M system-google/lib64/libfacelock_jni.so
-rw-r--r-- 1 1.2M system-google/lib64/libfilterpack_facedetect.so
-rw-r--r-- 1 36K system-google/lib64/libgps.utils.so
-rw-r--r-- 1 1.4M system-google/lib64/libjni_keyboarddecoder.so
-rw-r--r-- 1 1.1M system-google/lib64/libjni_latinimegoogle.so
-rw-r--r-- 1 149K system-google/lib64/libloc_api_v02.so
-rw-r--r-- 1 65K system-google/lib64/libloc_core.so
-rw-r--r-- 1 22K system-google/lib64/libloc_ds_api.so
-rw-r--r-- 1 177K system-google/lib64/libloc_eng.so
-rw-r--r-- 1 20M system-google/lib64/libpatts_engine_jni_api.so
-rw-r--r-- 1 158K system-google/lib64/libspeexwrapper.so
-rw-r--r-- 1 58K system-google/lib64/libtinyxml.so
-rw-r--r-- 1 94K system-google/media/audio/alarms/Timer.ogg
-rw-r--r-- 1 55K system-google/media/audio/notifications/Ariel.ogg
-rw-r--r-- 1 34K system-google/media/audio/notifications/Carme.ogg
-rw-r--r-- 1 36K system-google/media/audio/notifications/Ceres.ogg
-rw-r--r-- 1 37K system-google/media/audio/notifications/Elara.ogg
-rw-r--r-- 1 23K system-google/media/audio/notifications/Europa.ogg
-rw-r--r-- 1 43K system-google/media/audio/notifications/Iapetus.ogg
-rw-r--r-- 1 37K system-google/media/audio/notifications/Io.ogg
-rw-r--r-- 1 22K system-google/media/audio/notifications/Rhea.ogg
-rw-r--r-- 1 40K system-google/media/audio/notifications/Salacia.ogg
-rw-r--r-- 1 36K system-google/media/audio/notifications/Tethys.ogg
-rw-r--r-- 1 32K system-google/media/audio/notifications/Titan.ogg
-rw-r--r-- 1 145K system-google/media/audio/ringtones/Callisto.ogg
-rw-r--r-- 1 335K system-google/media/audio/ringtones/Dione.ogg
-rw-r--r-- 1 133K system-google/media/audio/ringtones/Ganymede.ogg
-rw-r--r-- 1 107K system-google/media/audio/ringtones/Luna.ogg
-rw-r--r-- 1 448K system-google/media/audio/ringtones/Oberon.ogg
-rw-r--r-- 1 111K system-google/media/audio/ringtones/Phobos.ogg
-rw-r--r-- 1 151K system-google/media/audio/ringtones/Sedna.ogg
-rw-r--r-- 1 610K system-google/media/audio/ringtones/Titania.ogg
-rw-r--r-- 1 418K system-google/media/audio/ringtones/Triton.ogg
-rw-r--r-- 1 240K system-google/media/audio/ringtones/Umbriel.ogg
-rw-r--r-- 1 32K system-google/media/audio/ui/NFCFailure.ogg
-rw-r--r-- 1 25K system-google/media/audio/ui/NFCInitiated.ogg
-rw-r--r-- 1 27K system-google/media/audio/ui/NFCSuccess.ogg
-rw-r--r-- 1 33K system-google/media/audio/ui/NFCTransferComplete.ogg
-rw-r--r-- 1 28K system-google/media/audio/ui/NFCTransferInitiated.ogg
-rw-r--r-- 1 13K system-google/media/audio/ui/VideoStop.ogg
-rw-r--r-- 1 11K system-google/media/audio/ui/audio_end.ogg
-rw-r--r-- 1 11K system-google/media/audio/ui/audio_initiate.ogg
-rw-r--r-- 1 3.7M system-google/media/bootanimation.zip
-rw-r--r-- 1 2.7K system-google/priv-app/CNEService/CNEService.apk
-rw-r--r-- 1 505K system-google/priv-app/CNEService/oat/arm64/CNEService.odex
-rw-r--r-- 1 2.9K system-google/priv-app/CallStatistics/CallStatistics.apk
-rw-r--r-- 1 237K system-google/priv-app/CallStatistics/oat/arm64/CallStatistics.odex
-rw-r--r-- 1 543K system-google/priv-app/CellBroadcastReceiver/CellBroadcastReceiver.apk
-rw-r--r-- 1 221K system-google/priv-app/CellBroadcastReceiver/oat/arm64/CellBroadcastReceiver.odex
-rw-r--r-- 1 5.5K system-google/priv-app/ConfigUpdater/ConfigUpdater.apk
-rw-r--r-- 1 8.8M system-google/priv-app/ConfigUpdater/oat/arm64/ConfigUpdater.odex
-rw-r--r-- 1 17K system-google/priv-app/ConnMO/ConnMO.apk
-rw-r--r-- 1 201K system-google/priv-app/ConnMO/oat/arm64/ConnMO.odex
-rw-r--r-- 1 3.8K system-google/priv-app/DCMO/DCMO.apk
-rw-r--r-- 1 381K system-google/priv-app/DCMO/oat/arm64/DCMO.odex
-rw-r--r-- 1 60K system-google/priv-app/DMService/DMService.apk
lrw-r--r-- 1 26 system-google/priv-app/DMService/lib/arm/libdmengine.so -> /system/lib/libdmengine.so
lrw-r--r-- 1 30 system-google/priv-app/DMService/lib/arm/libdmjavaplugin.so -> /system/lib/libdmjavaplugin.so
-rw-r--r-- 1 397K system-google/priv-app/DMService/oat/arm/DMService.odex
-rw-r--r-- 1 2.6K system-google/priv-app/DiagMon/DiagMon.apk
-rw-r--r-- 1 357K system-google/priv-app/DiagMon/oat/arm64/DiagMon.odex
-rw-r--r-- 1 167K system-google/priv-app/Entitlement/Entitlement.apk
-rw-r--r-- 1 101K system-google/priv-app/Entitlement/oat/arm64/Entitlement.odex
-rw-r--r-- 1 1.0M system-google/priv-app/GCS/GCS.apk
-rw-r--r-- 1 5.1M system-google/priv-app/GCS/oat/arm64/GCS.odex
-rw-r--r-- 1 13K system-google/priv-app/GoogleBackupTransport/GoogleBackupTransport.apk
-rw-r--r-- 1 29K system-google/priv-app/GoogleBackupTransport/oat/arm64/GoogleBackupTransport.odex
-rw-r--r-- 1 4.7M system-google/priv-app/GoogleContacts/GoogleContacts.apk
-rw-r--r-- 1 9.0M system-google/priv-app/GoogleContacts/oat/arm64/GoogleContacts.odex
-rw-r--r-- 1 5.5M system-google/priv-app/GoogleDialer/GoogleDialer.apk
-rw-r--r-- 1 11M system-google/priv-app/GoogleDialer/oat/arm64/GoogleDialer.odex
-rw-r--r-- 1 281K system-google/priv-app/GoogleFeedback/GoogleFeedback.apk
-rw-r--r-- 1 997K system-google/priv-app/GoogleFeedback/oat/arm64/GoogleFeedback.odex
-rw-r--r-- 1 5.4M system-google/priv-app/GoogleLoginService/GoogleLoginService.apk
-rw-r--r-- 1 5.9M system-google/priv-app/GoogleLoginService/oat/arm64/GoogleLoginService.odex
-rw-r--r-- 1 3.9K system-google/priv-app/GoogleOneTimeInitializer/GoogleOneTimeInitializer.apk
-rw-r--r-- 1 217K system-google/priv-app/GoogleOneTimeInitializer/oat/arm64/GoogleOneTimeInitializer.odex
-rw-r--r-- 1 1.4M system-google/priv-app/GooglePackageInstaller/GooglePackageInstaller.apk
-rw-r--r-- 1 3.3M system-google/priv-app/GooglePackageInstaller/oat/arm64/GooglePackageInstaller.odex
-rw-r--r-- 1 401K system-google/priv-app/GooglePartnerSetup/GooglePartnerSetup.apk
-rw-r--r-- 1 2.7M system-google/priv-app/GooglePartnerSetup/oat/arm64/GooglePartnerSetup.odex
-rw-r--r-- 1 3.5M system-google/priv-app/GoogleServicesFramework/GoogleServicesFramework.apk
-rw-r--r-- 1 54K system-google/priv-app/HiddenMenu/HiddenMenu.apk
-rw-r--r-- 1 517K system-google/priv-app/HiddenMenu/oat/arm64/HiddenMenu.odex
-rw-r--r-- 1 446K system-google/priv-app/HotwordEnrollment/HotwordEnrollment.apk
-rw-r--r-- 1 49K system-google/priv-app/HotwordEnrollment/oat/arm64/HotwordEnrollment.odex
-rw-r--r-- 1 11M system-google/priv-app/Phonesky/Phonesky.apk
-rw-r--r-- 1 23M system-google/priv-app/Phonesky/oat/arm64/Phonesky.odex
-rw-r--r-- 1 41M system-google/priv-app/PrebuiltGmsCore/PrebuiltGmsCore.apk
-rw-r--r-- 1 73M system-google/priv-app/PrebuiltGmsCore/oat/arm/PrebuiltGmsCore.odex
-rw-r--r-- 1 85M system-google/priv-app/PrebuiltGmsCore/oat/arm64/PrebuiltGmsCore.odex
-rw-r--r-- 1 3.2M system-google/priv-app/SetupWizard/SetupWizard.apk
-rw-r--r-- 1 6.4M system-google/priv-app/SetupWizard/oat/arm64/SetupWizard.odex
-rw-r--r-- 1 318K system-google/priv-app/SprintDM/SprintDM.apk
-rw-r--r-- 1 461K system-google/priv-app/SprintDM/oat/arm64/SprintDM.odex
-rw-r--r-- 1 123K system-google/priv-app/TagGoogle/TagGoogle.apk
-rw-r--r-- 1 901K system-google/priv-app/TagGoogle/oat/arm64/TagGoogle.odex
-rw-r--r-- 1 25M system-google/priv-app/Velvet/Velvet.apk
-rw-r--r-- 1 4.2M system-google/priv-app/Velvet/lib/arm64/libcronet.so
-rw-r--r-- 1 16M system-google/priv-app/Velvet/lib/arm64/libgoogle_speech_jni.so
-rw-r--r-- 1 218K system-google/priv-app/Velvet/lib/arm64/libgoogle_speech_micro_jni.so
-rw-r--r-- 1 924K system-google/priv-app/Velvet/lib/arm64/libvcdecoder_jni.so
-rw-r--r-- 1 27M system-google/priv-app/Velvet/oat/arm64/Velvet.odex
-rw-r--r-- 1 146K system-google/recovery-from-boot.p
-rw-r--r-- 1 22M system-google/usr/icu/icudt55l.dat
-rw-r--r-- 1 6.2M system-google/usr/srec/en-US/CLG.prewalk.fst
-rw-r--r-- 1 464 system-google/usr/srec/en-US/CONTACTS.fst
-rw-r--r-- 1 1.2K system-google/usr/srec/en-US/CONTACTS.syms
-rw-r--r-- 1 17M system-google/usr/srec/en-US/action.pumpkin
-rw-r--r-- 1 403K system-google/usr/srec/en-US/c_fst
-rw-r--r-- 1 229K system-google/usr/srec/en-US/class_normalizer.mfar
-rw-r--r-- 1 1.9K system-google/usr/srec/en-US/commands.abnf
-rw-r--r-- 1 285 system-google/usr/srec/en-US/compile_grammar.config
-rw-r--r-- 1 124 system-google/usr/srec/en-US/config.pumpkin
-rw-r--r-- 1 3.4K system-google/usr/srec/en-US/contacts.abnf
-rw-r--r-- 1 1.7K system-google/usr/srec/en-US/dict
-rw-r--r-- 1 3.7K system-google/usr/srec/en-US/dictation.config
-rw-r--r-- 1 351K system-google/usr/srec/en-US/dist_belief
-rw-r--r-- 1 3.5M system-google/usr/srec/en-US/dnn
-rw-r--r-- 1 1.4K system-google/usr/srec/en-US/endpointer_dictation.config
-rw-r--r-- 1 20K system-google/usr/srec/en-US/endpointer_model.mmap
-rw-r--r-- 1 1.5K system-google/usr/srec/en-US/endpointer_voicesearch.config
-rw-r--r-- 1 496K system-google/usr/srec/en-US/g2p.data
-rw-r--r-- 1 3.2M system-google/usr/srec/en-US/g2p_fst
-rw-r--r-- 1 2.6K system-google/usr/srec/en-US/grammar.config
-rw-r--r-- 1 590 system-google/usr/srec/en-US/graphemes.syms
-rw-r--r-- 1 179K system-google/usr/srec/en-US/hmm_symbols
-rw-r--r-- 1 110K system-google/usr/srec/en-US/hmmlist
-rw-r--r-- 1 2.6K system-google/usr/srec/en-US/input_mean_std_dev
-rw-r--r-- 1 1.3M system-google/usr/srec/en-US/lexicon.U.fst
-rw-r--r-- 1 2.9M system-google/usr/srec/en-US/lstm_model.uint8.data
-rw-r--r-- 1 1.1K system-google/usr/srec/en-US/magic_mic.config
-rw-r--r-- 1 2.0K system-google/usr/srec/en-US/metadata
-rw-r--r-- 1 862 system-google/usr/srec/en-US/norm_fst
-rw-r--r-- 1 322K system-google/usr/srec/en-US/normalizer.mfar
-rw-r--r-- 1 562K system-google/usr/srec/en-US/offensive_word_normalizer.mfar
-rw-r--r-- 1 244 system-google/usr/srec/en-US/phonelist
-rw-r--r-- 1 224 system-google/usr/srec/en-US/phonelist.syms
-rw-r--r-- 1 833 system-google/usr/srec/en-US/phonemes.syms
-rw-r--r-- 1 6.8M system-google/usr/srec/en-US/rescoring.fst.louds
-rw-r--r-- 1 70K system-google/usr/srec/en-US/semantics.pumpkin
-rw-r--r-- 1 3.7K system-google/usr/srec/en-US/voice_actions.config
-rw-r--r-- 1 572 system-google/usr/srec/en-US/voice_actions_compiler.config
-rw-r--r-- 1 859K system-google/usr/srec/en-US/wordlist.syms
lrw-r--r-- 1 7 system-google/vendor > /vendor
-rwxr-xr-x 1 67K system-google/xbin/dexdump
-rwxr-xr-x 1 606K system-google/xbin/wlutil
So naturally my questions are:
Which of these blobs do I need at a minimum to get cellular service in my AOSP image?
Where do I put them in my AOSP source tree to ensure they get placed in the correct locations in the system.img make generates?
were you able to solve this issue?
Were you able to solve this issue?
Is the cellular data working fine now?

[Solved] Wifi broken after flashing, /persist partition lost?

I just got my Pure and started right off by unlocking it and getting it ready for use. Wifi worked originally.
* I unlocked the bootloader (wifi still working),
* allowed system update to Marshmallow
* applied root using the instructions in this thread,
* applied the fix for unlocked logo from this thread (the file linked to by the "Marshmallow logo" link)
Of those steps, probably the logo fix was the most risky, as it says that it's for Lollipop.
So here's the problem. My system boots just fine, but the wifi will not turn on. When I look at the wifi MAC address it says it's 02:00:00:00:00:00, which is obviously not right. When I turn on wifi, logcat says this:
Code:
WifiStateMachine: Failed to load driver
WifiStateMachine: setWifiState: unknown state
I'm guessing something got overwritten in a persistent partition I wasn't supposed to touch. It may be similar to the problem talked about in this thread.
Any ideas what I should do to recover? I'm guessing I've lost some persistent data and I'll need some help from someone who can get me a valid version of that data.
Try using the return to stock tool? It'll put you back to lollipop, but it should fix it.
That's probably worth a try, downloading stock image right now.
Additional info: all other radios (LTE, Bluetooth) seem to work okay.
Could someone do the following and see if it looks the same as mine?
Code:
[email protected]:/ $ su
[email protected]:/ # ls -lR /persist/
/persist/:
drwxr-xr-x mot_tcmd mot_tcmd 1969-12-31 17:03 antcap
drwxr-xr-x mot_pwric mot_pwric 1969-12-31 17:03 batt_health
drwxr-xr-x mot_tcmd bluetooth 1969-12-31 17:03 bt
drwxr-sr-x mot_tcmd mot_tcmd 1969-12-31 17:03 camera
drwx------ system system 2015-07-30 12:20 data
drwxrwx--- system graphics 1969-12-31 17:03 display
drwxr-xr-x mot_tcmd mot_tcmd 1969-12-31 17:03 factory
drwx------ root root 1969-12-31 17:00 lost+found
drwxrwx--- radio radio 2015-09-09 20:11 mdm
drwxr-xr-x mot_tcmd mot_tcmd 1969-12-31 17:03 public
drwxrws--- mot_tpapi mot_tpapi 2015-08-24 07:18 security
drwxrwxr-x root root 2015-07-29 11:05 sensors
drwxr-xr-x mot_tcmd mot_tcmd 1969-12-31 17:03 wifi
-rw------- wifi system 7 1969-12-31 17:03 wlan_mac_serial.bin
drwxrwxr-x mot_drm mot_drm 1969-12-31 17:03 wmdrm
/persist//antcap:
/persist//batt_health:
/persist//bt:
/persist//camera:
drwxr-xr-x camera mot_tcmd 1969-12-31 17:01 ledcal
/persist//camera/ledcal:
-rw-rw---- camera camera 77 1969-12-31 17:01 front
-rw-rw---- camera camera 229 1969-12-31 17:01 rear
/persist//data:
drwx------ system system 2015-08-24 07:19 sfs
drwx------ system system 2015-07-30 12:20 tz
/persist//data/sfs:
-rwx------ system system 1336 2015-08-24 07:18 4EZQjbOGb1W-1552WQ33osdXIck_
-rwx------ system system 1336 2015-08-24 07:19 BlnxQBesIFWbwNCK2OMEGP-wOkg_
-rwx------ system system 1336 2015-08-24 07:18 DsmAfAWBFCJVlmQUsgNSwY12M+E_
-rwx------ system system 1336 2015-08-24 07:18 FvF0SaGbFseVknwwKwP2Pknp7KQ_
-rwx------ system system 1336 2015-08-24 07:19 S184ZMCBpOaKXnKHFMVZu2KUkTY_
-rwx------ system system 1336 2015-08-24 07:19 S3TZEnsT9XVFFU2I2lWugTOYodo_
-rwx------ system system 1336 2015-08-24 07:19 bT7VGR2tDnBydb1IJmFjNDdBaU8_
-rwx------ system system 1336 2015-08-24 07:18 guy+4YDd1pve+q2qkHB6MDV1xDQ_
-rwx------ system system 1336 2015-08-24 07:18 iV4mGrgUcC10F1SsXzWV6jTaSQw_
-rwx------ system system 1336 2015-08-24 07:18 nmD18nOVg-hJSoABl8Jk6ugi0Ns_
-rwx------ system system 1336 2015-08-24 07:19 oQUrZKLiEwq4QuUfUhM7PmBq714_
-rwx------ system system 1336 2015-08-24 07:18 ouH--IhHfo3YeuC7fV5HOm64N8o_
/persist//data/tz:
-rwx------ system system 272 2015-08-24 07:19 tz_counter
-rwx------ system system 272 2015-08-24 07:19 tz_counter.bak
/persist//display:
/persist//factory:
-rw-rw---- mot_tcmd mot_tcmd 128 1969-12-31 17:01 fti
/persist//lost+found:
/persist//mdm:
-rw------- radio radio 5 2015-12-18 11:22 oma_dm_update
/persist//public:
drwxrwx--- mot_atvc shell 1969-12-31 17:03 atvc
drwxr-xr-x mot_accy mot_tcmd 1969-12-31 17:03 battd
drwxr-xr-x system mot_tcmd 2015-09-10 09:45 hiddenmenu
drwx------ system system 1969-12-31 17:03 locale
drwx------ radio radio 1969-12-31 17:03 omadm
drwxrwx--- system system 1969-12-31 17:03 svcs
/persist//public/atvc:
/persist//public/battd:
/persist//public/hiddenmenu:
drwxrwxr-x system mot_tcmd 2015-08-24 07:51 data
-rw-rw-r-- system mot_tcmd 4 2015-12-18 11:24 life_calls
-rw-rw-r-- system mot_tcmd 8 2015-12-18 11:24 life_timer
/persist//public/hiddenmenu/data:
-rw-rw-r-- system mot_tcmd 8 2015-12-18 10:23 mobile_data_rx
-rw-rw-r-- system mot_tcmd 8 2015-12-18 10:23 mobile_data_tx
-rw-rw-r-- system mot_tcmd 8 2015-12-18 10:23 wifi_data_rx
-rw-rw-r-- system mot_tcmd 8 2015-12-18 10:23 wifi_data_tx
/persist//public/locale:
/persist//public/omadm:
/persist//public/svcs:
/persist//security:
-rw------- mot_tcmd mot_tpapi 1954 2015-08-24 07:18 18.bin
/persist//sensors:
-rw-rw-r-- system root 2 2015-07-29 11:05 sensors_settings
/persist//wifi:
/persist//wmdrm:
Looks like system restore did it. I wish I knew what happened but it seems to be working now.
I downloaded the stock Marshmallow image from this thread, specifically the 6.0 Stock Unrooted.zip file and then I restored it in TWRP (restore, not install zip, be sure to read the instructions in the thread). I only restored boot and system, not data.
Edit:
Okay, last update. I flashed the boot.img from the root method linked above and the problem is back. I'll take my issue over there.
Hello,
I went back to lolipop, because I had problems that I will make in another post (different from yours). When I lost my wifi when I returned to the clark stock rom, I had to restore the modem by itself (NON-HLOS.bin) because for some reason it was skipping it. Can't remember if I did TWRP or bootloaded it on though.
Had the same problem. A clean wipe \install of TruPureX MM rom fixed it for me.
Mismatch between modem and android version broke my wifi.
I tried to downgrade to clark_retus stock image on Motorola's website, which included flashing the modem (NON-HLOS.bin) meant for android 5. For some reason I had a boot loop, so I restored my 6.0 nandroid. All was working except wifi. I downloaded the 6.0 firmware from the firmware thread (XT1575_CLARK_RETUS_6.0_MPH24.49-18_cid9_subsidy-DEFAULT_CFC.xml.zip), extracted the 6.0 modem file (NON-HLOS.bin) and flash that with fastboot; now things are fine.

Samsung A205 FMP error

My samsung A205 fails to initialize FMP, the smatphone with the bootloader unlocked.
I tried various kernels like Rippler, Eureka and physwizz versions in TWRP.
And several Roms
I can always see the same error in dmesg:
Code:
[ 2560.206443] [2: mmc-cmdqd/0: 1799] exynos-fmp fmp: exynos_fmp_config: Fail to work fmp config due to fips in error.
[ 2560.206474] [2: mmc-cmdqd/0: 1799] mmc0: cmdq_prep_tran_desc: failed to configure crypto engine. ret(-1)
[ 2560.206485] [2: mmc-cmdqd/0: 1799] mmc0: cmdq_request: failed to setup tx desc: -1
[ 2560.206535] I[2: ksoftirqd/2: 22] mmc0: mmc_blk_cmdq_complete_rq: txfr error: -1
[ 2560.206630] [2: kworker/2:2: 3612]
[ 2560.206630] [2: kworker/2:2: 3612]
[ 2560.206630] [2: kworker/2:2: 3612] =============== CQ RECOVERY START ======================
[ 2560.206630] [2: kworker/2:2: 3612]
[ 2560.206784] [2: kworker/2:2: 3612] [CQ] mmc0: SW RESET: 250
[ 2560.206794] [2: kworker/2:2: 3612] ----- cnt_recovery: 2743
[ 2560.206803] [2: kworker/2:2: 3612] ----- cnt_recovery_halt_pass: 2743
[ 2560.206812] [2: kworker/2:2: 3612] ----- cnt_recovery_halt_fail: 0
[ 2560.207055] [2: kworker/2:2: 3612] [CQ] mmc0:----- REQUEUE: tag 0 sector 32770, nr 2, retries 1
[ 2560.207181] [2: kworker/2:2: 3612] [CQ] mmc0: Enable after SW RESET
[ 2560.207198] [2: kworker/2:2: 3612]
While a well-functioning team shows:
Code:
[ 2.047718] [7: swapper/0: 1] exynos-fmp fmp: Exynos FMP Version: 1.3.2
[ 2.048316] [7: swapper/0: 1] exynos-fmp fmp: Found partno 32 for FMP test
[ 2.053900] [7: swapper/0: 1] exynos-fmp fmp: FIPS: self-tests for FMP aes-xts passed
[ 2.058193] [7: swapper/0: 1] exynos-fmp fmp: FIPS: self-tests for FMP aes-cbc passed
[ 2.058212] [7: swapper/0: 1] exynos-fmp fmp: FIPS: self-tests for FMP sha256 passed
[ 2.058246] [6: kworker/u16:3: 251] [SENSOR] stk3x3x_prox_cal: read_value = 10, (0xc0)
[ 2.058263] [7: swapper/0: 1] exynos-fmp fmp: FIPS: self-tests for UFSFMP hmac(sha256) passed
[ 2.058269] [7: swapper/0: 1] exynos-fmp fmp: exynos_fmp_fips_init: self-tests for FMP passed
[ 2.058751] [7: swapper/0: 1] FIPS(do_fmp_integrity_check): Integrity Check Passed
[ 2.058758] [7: swapper/0: 1] exynos-fmp fmp: exynos_fmp_fips_init: integrity check for FMP passed
[ 2.058868] [7: swapper/0: 1] exynos-fmp fmp: exynos_fmp_probe: Exynos FMP driver is proved
Documentation about FMP and FIPS:
Document 2016
Document 2020
What could i try?
because of that mistake cannot access the flash memory properly so it cannot start a full android system just start in TWRP.
tried compiling a kernel with FIPS options disabled, and it works I can see the capabilities of all partitions by starting TWRP in read-only mode. when I do it in read write mode it works unstable and restarts.
Exploring in the kernel source code I could see
arch/arm64/boot/dts/exynos/dtbo/exynos7885.dts
Code:
fmp_0: fmp {
compatible = "samsung,exynos-fmp";
exynos,host-type = "mmc";
exynos-host = <&dwmmc_0>;
exynos,block-type = "mmcblk0p";
exynos,fips-block_offset = <5>;
Mount the partition mmcblk0p5 (CPEFS) and I found it to be of type ext4 and empty.
Could someone give me a copy of that partition or show me what files it originally has inside?
Upgrade:
I discovered that the partition mmcblk0p4 (SEC EFS) is corrupt.
In mmcblk0p5 (CPEFS) I have these two hidden files:
Code:
.nv_core.bak
.nv_core.bak.md5
In mmcblk0p4 (SEC EFS) I have:
Code:
Battery
FactoryApp
TEE
adp_token
afc
cpk
imei
lost+found
lpm
lpm_boot.log
nfc
nxp
pfw_data
prov
prov_data
recovery
sec_efs
ssm
tee
umc
wv.keys
./Battery:
batt_capacity_max
./FactoryApp:
Sensorinfo
asoc
batt_after_manufactured
batt_cable_count
batt_discharge_level
batt_temp_charge
cisd_data
cisd_wc_data
factorymode
fdata
gyro_cal_data
hist_nv
keystr
max_current
max_temp
rtc_status
test_nv
./FactoryApp/Sensorinfo:
Accelerometer
Barometer
Gyroscope
Light
Magnetometer
Proximity
./TEE:
./adp_token:
./afc:
./cpk:
./imei:
factory.prop
mps_code.dat
omcnw_code.dat
./lost+found:
#27
#28
#29
#30
#31
#32
#33
#35
#36
#39
#40
#41
#42
#43
#44
#45
#46
#48
#49
#50
#51
#52
#53
#54
#55
#56
#57
#58
#59
#60
#61
#62
#63
#64
#65
#66
#67
#72
#74
#75
#76
#81
#82
#92
#93
#94
#95
#98
./lost+found/#40:
./lpm:
./nfc:
./nxp:
./pfw_data:
./prov:
issued.log
libdevkm.lock
./prov_data:
./recovery:
extra_history
history
prev_tmp_recovery.log
./sec_efs:
!SVC
SVC
SettingsBackup.json
nfc
skpm_FACTORY_OCF_ECC_P256
skpm_OTA_WB_TA_Downloader_RSA_2048
skpm_sk.dat
skpm_supported_list
ucm_ca_cert
./sec_efs/nfc:
./sec_efs/ucm_ca_cert:
./ssm:
./tee:
./umc:
BulkEnrollmentProfile
From what I see in lost+found I know I have lost files.
Unfortunately e2fsck does not repair my partition. I made a copy using dd and tried to repair that image from my Salckware on my desktop pc but without success.
It would be great if someone published a complete backup of the partitions obviously without MAC, IMEI, Serial Number, and Bluethoo address.
Who can help me:
I need a copy of the sec_efs partition
To do this, I had to run:
Code:
dd if=/dev/block/mmcblk0p4 of=/external_sd/secefs.img bs=4096
or at least the listing
Code:
ls -R -l > /external_sd/secefs.lst
I've been looking for a backup on the web for days but I haven't been successful so far. If you see any dumps of that paticion on the web, the download link will do me good.
Thanks
Cant you just install stock firmware using odin
physwizz said:
Cant you just install stock firmware using odin
Click to expand...
Click to collapse
Hello,
do not
This phone came with an error in which when turning on it showed a blue screen where it said update, then it failed and it was on screen:
Code:
E:[libfs_mgr]
E:[PDP] lstat /c____/pdp_b__ : 0 - No PDP scenario
and entered the recovery stock. where it said it couldn't mount / cache
if I put wipe cache it threw other errors and it was not corrected.
If I chose to start from the system it would be in a loop.
Initially it was with BIT 1 I updated it to BIT 8 using odin but the error persisted, I continued with the loop but (from what I search the web nobody solved it)
After a week of testing with different roms. On February 4, immediately took advantage of activating oem and unlocking the bootloader. When rebooting it did not turn on again but I was able to finish unlocking the bootloader and install TWRP 3.5 from physwizz.
When entering TWRP it does not allow multidisabler-samsung-3.1.zip
giving me an error. I could not mount the vendor partition nor any other. What's more, everything accused 0 MB
Using TWRP 3.3 in combination with the Eureka kernel I am able to mount some partitions.
After that I started to read the system logs to explore dmesg and there I realized that what is wrong is the FMP system
Reading the source code of the linux kernel I see that this works using the partition mmcblk0p5 (CPEFS).
Regarding CPEFS, note that in the PIT file it does not declare which file should be written to that partition.
Checking the other partitions I discover broken SEC_EFS.
I made a backup of what I could using tar and another with dd
and I tried to repair it using e2fsck but it was badly damaged
format it with the same original parameters and restore the files you rescue from backups.
Currently if I install an original rom with odin I get the same scenario.
loop and if I started I recovered the error:
Code:
E:[PDP] lstat /c____/pdp_b__ : 0 - No PDP scenario
NOTE: Now I am looking for a merge file. I understand what the factory uses. but I only found up to BIT 7 and my phone is in BIT 8.
Thank you
Excuse my english
sercari said:
Hello,
do not
This phone came with an error in which when turning on it showed a blue screen where it said update, then it failed and it showed on the screen:
Code:
E:[libfs_mgr]
E:[PDP] lstat /c____/pdp_b__ : 0 - No PDP scenario
and entered the recovery stock. where it said it couldn't mount / cache
if I put wipe cache it threw other errors and it was not corrected.
If I chose to start from the system it would be in a loop.
Initially it was with BIT 1 I updated it to BIT 8 using odin but the error persisted, I continued with the loop but (from what I search the web nobody solved it)
After a week of trying different roms. on february 4 it turned on immediately take advantage of activating oem and unlocking the bootloader. When rebooting it did not turn on again but I was able to finish unlocking the bootloader and install TWRP 3.5 from physwizz.
When entering TWRP it does not allow multidisabler-samsung-3.1.zip
giving me an error. I could not mount the vendor partition nor any other. What's more, everything accused 0 MB
Using TWRP 3.3 in combination with the Eureka kernel I managed to mount some partitions.
After that I started reading the system logs to explore dmesg and there I realized that what is wrong is the FMP system
Reading the source code of the linux kernel I see that this works using the partition mmcblk0p5 (CPEFS).
Regarding CPEFS, note that in the PIT file it does not declare which file should be written to that partition.
checking the other partitions I discover broken SEC_EFS.
I made a backup of what I pure using tar and another with dd
and I tried to repair it using e2fsck but it was badly damaged
Format it with the same original parameters and restore the files you rescue from the backups.
Currently if I install an original rom with odin I get the same scenario.
loop and if I started I recovered the error:
Code:
E:[PDP] lstat /c____/pdp_b__ : 0 - No PDP scenario
NOTE: Now I am looking for a merge file. I understand what the factory uses. but I only found up to BIT 7 and my phone is in BIT 8.
Thank you
Excuse my english
Click to expand...
Click to collapse
Go here
Crash Recovery for the Samsung Galaxy A20
Crash Recovery for the Samsung Galaxy A20 1. Be Prepared Most of us will suffer from a crash at some time. If you know how to fix it, you will have a lot less stress. There are certain files you need to keep in readiness. Always backup boot...
forum.xda-developers.com
physwizz said:
Go here
Crash Recovery for the Samsung Galaxy A20
Crash Recovery for the Samsung Galaxy A20 1. Be Prepared Most of us will suffer from a crash at some time. If you know how to fix it, you will have a lot less stress. There are certain files you need to keep in readiness. Always backup boot...
forum.xda-developers.com
Click to expand...
Click to collapse
Thank you, this guide is very good, unfortunately it does not solve my case. Disable_Dm-Verity_ForceEncrypt didn't work either.
The problem of my phone is with FMP = Flash Memory Protector
It fails to start FIPS because a file is probably missing or corrupt. I think that what would help me would be to see the list of files of those partitions to know their name and weight.
It would help me if you can create a text file on your external memory card and paste this content inside:
Code:
mkdir /secefs
mount /dev/block/mmcblk0p4 /secefs -o ro
cd /secefs
ls -a -R -l > /external_sd/secefs.lst
mkdir /efs
mount /dev/block/mmcblk0p3 /efs -o ro
cd /efs
ls -a -R -l > /external_sd/efs.lst
mkdir /cpefs
mount /dev/block/mmcblk0p5 /cpefs -o ro
cd /cpefs
ls -a -R -l > /external_sd/cpefs.lst
Or with this other you can make a backup:
Code:
dd if=/dev/block/mmcblk0p4 of=/external_sd/secefs.img
dd if=/dev/block/mmcblk0p3 of=/external_sd/efs.img
dd if=/dev/block/mmcblk0p5 of=/external_sd/cpefs.img
(suppose the file is called mkbl.txt)
finally run it from the TWRP terminal:
Code:
/external_sd/mkbl.txt
with that I would generate files in /external_sd/
NOTE: If you generate backup files, keep in mind that they contain IMEIs and addresses that are private to you. You could make a copy of the .img file, mount it from linux in a folder and edit the files that contain personal information. Or you can trust me and I can erase that personal information to make the files public.
On the other hand, in the case of the lists with ls, it does not include any personal information, only file names and weights
sercari said:
In mmcblk0p5 (CPEFS) I have these two hidden files:
Code:
.nv_core.bak
.nv_core.bak.md5
Click to expand...
Click to collapse
Confirmed cpefs that is mounted in / vendor / cpefs contains only these two files normally.
Code:
-rwx------ 1 radio radio 546304 feb 4 20:51 .nv_core.bak
-rwx------ 1 radio radio 32 feb 4 20:51 .nv_core.bak.md5
drwx------ 2 radio radio 4096 ene 1 2019 lost+found
I would only need to find out the content of the partition /dev/mccblk0p4 (sec_efs) which I think is not mounted anywhere when the system is running. for which it is necessary to mount it to be able to list its content. I wait if someone can help me.
Thanks to TBM13 from the telegram @Galaxy_A20_official group who shared with me the list of files and directories on their sec_efs partition.
Thanks to TOP who shared the list of files on his cpefs partition. Thanks to this I can continue investigating.
mmcblk0p4 (sec_efs):
Code:
.:
total 180
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 .
drwxr-xr-x 30 root root 0 2021-02-24 17:24 ..
drwxrwxr-x 2 radio system 4096 2019-01-01 12:00 Battery
drwxrwxr-x 3 system system 4096 2019-08-31 03:09 FactoryApp
drwxrwx--- 2 radio system 4096 2019-01-01 12:00 TEE
drwxr--r-- 2 system system 4096 2019-01-01 12:00 adp_token
drwx------ 2 system system 4096 2019-01-01 12:00 afc
drwxrwx--x 2 radio system 4096 2019-06-29 17:29 cpk
drwxrwxr-x 2 root radio 4096 2020-04-29 04:04 imei
drwx------ 2 root root 16384 2008-12-31 15:00 lost+found
drwxrwxr-x 2 system system 4096 2020-12-15 23:19 lpm
-rw-rw---- 1 root system 256 2020-12-15 23:19 lpm_boot.log
drwx------ 2 nfc nfc 4096 2019-01-01 12:00 nfc
drwxrwx--- 2 system audio 4096 2019-01-01 12:00 nxp
drwxrw---- 2 oem_5279 oem_5279 4096 2019-01-01 12:00 pfw_data
drwxrwx--- 2 system system 4096 2019-06-29 17:22 prov
drwxrwx--- 2 radio system 4096 2019-01-01 12:00 prov_data
drwxrwx--x 2 radio system 4096 2020-12-15 23:25 recovery
drwxrwxr-x 4 radio system 4096 2020-12-15 23:32 sec_efs
drwxrwx--- 2 system system 4096 2019-01-01 12:00 ssm
drwx------ 2 system system 4096 2019-01-01 12:00 tee
drwx------ 2 system system 4096 2019-08-31 01:46 umc
-rw-r--r-- 1 system system 168 2019-06-29 17:22 wv.keys
./Battery:
total 20
drwxrwxr-x 2 radio system 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rw-rw---- 1 system system 4 2021-02-21 02:58 batt_capacity_max
./FactoryApp:
total 132
drwxrwxr-x 3 system system 4096 2019-08-31 03:09 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rw------- 1 system system 28 2019-06-29 08:37 HwParamBattQR
-rw------- 1 system system 4876 2019-06-29 17:22 HwParamData
-rw------- 1 system system 824 2019-06-29 17:22 HwPartInform
drwx------ 2 system system 4096 2019-01-01 12:00 Sensorinfo
-rw-r----- 1 system log 3 2019-01-01 12:00 asoc
-rwxr--r-- 1 system system 1 2019-01-01 12:00 baro_delta
-rw-r----- 1 system system 2 2020-12-15 22:43 batt_after_manufactured
-rw------- 1 system system 4 2021-02-23 14:39 batt_cable_count
-rw-r----- 1 system system 6 2020-12-15 22:57 batt_discharge_level
-rw------- 1 system system 62 2021-02-24 17:10 batt_temp_charge
-rw------- 1 system system 1 2019-01-01 12:00 cable_detect_count_octa
-rw-rw---- 1 system system 195 2021-02-23 15:31 cisd_data
-rw-rw---- 1 system system 20 2019-01-01 12:00 cisd_wc_data
-rwxr--r-- 1 system system 13 2019-01-01 12:00 control_no
-rw------- 1 system system 2 2020-11-28 14:37 earjack_count
-rwxr--r-- 1 system system 2 2019-06-29 17:22 factorymode
-rwxrwxr-x 1 system radio 4 2019-01-01 12:00 fdata
-rw------- 1 system system 30 2021-02-24 13:06 gyro_cal_data
-rwxrwxr-x 1 system radio 0 2018-12-31 17:00 hist_nv
-rwxr--r-- 1 system system 2 2019-06-29 17:22 keystr
-rw------- 1 system system 5 2019-10-12 21:38 max_current
-rw------- 1 system system 4 2020-01-19 20:53 max_temp
-rwxr--r-- 1 system system 5 2019-06-29 17:29 mdnie
-rw------- 1 system system 1 2019-06-29 17:29 mdnie_ver
-rwxr--r-- 1 system system 5 2019-01-01 12:00 prepay
-rw------- 1 system system 1 2019-06-29 17:22 rtc_status
-rwxr--r-- 1 system system 11 2019-06-29 17:22 serial_no
-rwxrwxr-x 1 system radio 2000 2018-12-31 17:00 test_nv
./FactoryApp/Sensorinfo:
total 40
drwx------ 2 system system 4096 2019-01-01 12:00 .
drwxrwxr-x 3 system system 4096 2019-08-31 03:09 ..
-rw------- 1 system system 21 2019-01-01 12:00 Accelerometer
-rw------- 1 system system 4 2019-01-01 12:00 Barometer
-rw------- 1 system system 17 2019-01-01 12:00 Gyroscope
-rw------- 1 system system 4 2019-01-01 12:00 Light
-rw------- 1 system system 19 2019-01-01 12:00 Magnetometer
-rw------- 1 system system 31 2019-01-01 12:00 Proximity
./TEE:
total 16
drwxrwx--- 2 radio system 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./adp_token:
total 16
drwxr--r-- 2 system system 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./afc:
total 16
drwx------ 2 system system 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./cpk:
total 20
drwxrwx--x 2 radio system 4096 2019-06-29 17:29 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rw-r--r-- 1 radio radio 920 2019-06-29 17:29 h2k.dat
./imei:
total 40
drwxrwxr-x 2 root radio 4096 2020-04-29 04:04 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rw------- 1 root root 96 2021-02-21 03:41 factory.prop
-rwxrwxr-x 1 radio system 3 2020-12-15 23:26 mps_code.dat
-rw-rw-r-- 1 radio root 3 2020-12-15 23:26 omcnw_code.dat
-rw-rw-r-- 1 radio root 3 2020-12-15 23:26 omcnw_code2.dat
-rwxrwxr-x 1 system radio 14 2019-06-29 17:22 prodcode.dat
-rw-rw-r-- 1 system system 4 2019-12-29 20:07 total_call_time
./lost+found:
total 28
drwx------ 2 root root 16384 2008-12-31 15:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./lpm:
total 20
drwxrwxr-x 2 system system 4096 2020-12-15 23:19 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rw-rw---- 1 root system 85 2020-12-15 23:19 lpm_info.log
./nfc:
total 16
drwx------ 2 nfc nfc 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./nxp:
total 16
drwxrwx--- 2 system audio 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./pfw_data:
total 16
drwxrw---- 2 oem_5279 oem_5279 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./prov:
total 20
drwxrwx--- 2 system system 4096 2019-06-29 17:22 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rw----r-- 1 system system 559 2019-09-01 00:28 issued.log
-rw-rw---- 1 system system 0 2019-01-01 12:00 libdevkm.lock
./prov_data:
total 16
drwxrwx--- 2 radio system 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./recovery:
total 24
drwxrwx--x 2 radio system 4096 2020-12-15 23:25 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rw------- 1 root root 257 2020-12-15 23:25 extra_history
-rw------- 1 root root 2529 2020-12-15 23:25 history
./sec_efs:
total 76
-rw------- 1 system system 569 2020-12-15 23:12 !SVC
drwxrwxr-x 4 radio system 4096 2020-12-15 23:32 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rwx------ 1 root radio 0 2019-06-29 17:07 .ffw
-rw------- 1 system system 569 2020-12-15 23:12 SVC
-rw------- 1 system system 6655 2020-12-15 23:32 SettingsBackup.json
drwx------ 2 nfc nfc 4096 2019-01-01 12:00 nfc
-rw------- 1 system system 1517 2019-06-29 17:22 skpm_FACTORY_OCF_ECC_P256
-rw------- 1 system system 983 2019-09-01 00:29 skpm_OTA_WB_FIDO_Bound_FP_ECC_P256
-rw------- 1 system system 4104 2019-08-31 02:43 skpm_OTA_WB_TA_Downloader_RSA_2048
-rw------- 1 system system 3941 2019-08-31 02:43 skpm_sk.dat
-rw------- 1 system system 4711 2019-09-01 00:29 skpm_supported_list
drwx------ 2 system system 4096 2019-01-01 12:00 ucm_ca_cert
./sec_efs/nfc:
total 16
drwx------ 2 nfc nfc 4096 2019-01-01 12:00 .
drwxrwxr-x 4 radio system 4096 2020-12-15 23:32 ..
./sec_efs/ucm_ca_cert:
total 16
drwx------ 2 system system 4096 2019-01-01 12:00 .
drwxrwxr-x 4 radio system 4096 2020-12-15 23:32 ..
./ssm:
total 16
drwxrwx--- 2 system system 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./tee:
total 16
drwx------ 2 system system 4096 2019-01-01 12:00 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
./umc:
total 20
drwx------ 2 system system 4096 2019-08-31 01:46 .
drwxrwx--x 21 system radio 4096 2019-08-31 01:46 ..
-rw------- 1 system system 1 2019-08-31 01:46 BulkEnrollmentProfile
Observing the list compare weight, permissions, owner and group of each file in /lost+found and I was able to deduce which file was and give it the corresponding location and name.
The only file I am missing is: /sec_efs/skpm_OTA_WB_FIDO_Bound_FP_ECC_P256
Someone has any idea about this file, apparently it is a key but I don't know if the phone should generate it automatically or how to get it.
I add that you do not know that the skpm_sk.dat file is blank. if I have it with a hex editor it is full of zeros
Thanks
Finally and mysteriously I boot into twrp allowing me to see all the partitions. (Only TWRP with full memory access would not start the system) Take advantage and I made a copy from partition 1 to 25 to and 31. Unfortunately I discovered that I have the partitions boot0, boot1, boot3, m9kefs, m9kefs2, m9kefs3, nad_fw, nad_refer blank.
UPDATE:
1- Get a copy of m9kefs1, 2 and 3 and I have them ok.

Haier - Android TV Firmware Dump [Help Needed]

Hi, my name is Kaleb, I am somewhat new to the android Rom development process. I have a Haier 43" LED Smart TV that I wish to make better by developing a custom Google or Android TV Rom. This Rom won't be for me alone however, it would be nice to turn these useless smart TVs into sumen a little better. It may not have much RAM, hover i have seen android 12 run on an ancient Samsung galaxy, so i have faith that this could be a great project and challenge.
Below I attached the files I could have gotten form the device. I would try daily to see how far i can get, I am still looking for decent tools to get the entire firmware out. If you have any recommendations, please send them my way.
Update so using "WwR_2.51_Eng" I was able to somewhat see what block certain files needed are located in. Below is the Info acquired.
>>adb -s 0000702ed9e8cd84 shell cat /proc/partitions
major minor #blocks name
253 0 296960 zram0
179 0 7634944 mmcblk0
179 1 2048 mmcblk0p1
179 2 2048 mmcblk0p2
179 3 1024 mmcblk0p3
179 4 20480 mmcblk0p4
179 5 20480 mmcblk0p5
179 6 1835008 mmcblk0p6
179 7 4687872 mmcblk0p7
179 8 786432 mmcblk0p8
179 9 1024 mmcblk0p9
179 10 76800 mmcblk0p10
179 11 1024 mmcblk0p11
179 12 7168 mmcblk0p12
179 13 20480 mmcblk0p13
179 14 10240 mmcblk0p14
179 15 1024 mmcblk0p15
179 16 1024 mmcblk0p16
179 17 1024 mmcblk0p17
179 18 1024 mmcblk0p18
179 19 1024 mmcblk0p19
179 20 4096 mmcblk0p20
179 21 4096 mmcblk0p21
179 22 1024 mmcblk0p22
179 23 3072 mmcblk0p23
179 24 1024 mmcblk0p24
179 25 1024 mmcblk0p25
179 26 10240 mmcblk0p26
179 27 1024 mmcblk0p27
179 28 1024 mmcblk0p28
179 29 1024 mmcblk0p29
179 30 256 mmcblk0p30
179 64 512 mmcblk0rpmb
>>adb -s 0000702ed9e8cd84 shell cat /proc/partinfo
dev: offset size name
part01: 00000000 00001000 "uboot"
part02: 00001000 00001000 "uboot_env"
part03: 00002000 00000800 "misc"
part04: 00002800 0000a000 "recovery"
part05: 0000c800 0000a000 "boot"
part06: 00016800 00380000 "system"
part07: 00396800 008f1000 "userdata"
part08: 00c87800 00180000 "cache"
part09: 00e07800 00000800 "reserved"
part10: 00e08000 00025800 "linux_rootfs"
part11: 00e2d800 00000800 "basic"
part12: 00e2e000 00003800 "perm"
part13: 00e31800 0000a000 "3rd_ro"
part14: 00e3b800 00005000 "3rd_rw"
part15: 00e40800 00000800 "reserved"
part16: 00e41000 00000800 "channelA"
part17: 00e41800 00000800 "channelB"
part18: 00e42000 00000800 "pq"
part19: 00e42800 00000800 "aq"
part20: 00e43000 00002000 "logo"
part21: 00e45000 00002000 "bootlogo"
part22: 00e47000 00000800 "tzbp"
part23: 00e47800 00001800 "adsp"
part24: 00e49000 00000800 "ciplus"
part25: 00e49800 00000800 "part_24"
part26: 00e4a000 00005000 "upgrade"
part27: 00e4f000 00000800 "part_26"
part28: 00e4f800 00000800 "part_27"
part29: 00e50000 00000800 "eeprom_A"
part30: 00e50800 00000200 "sch_pvr"
>>adb -s 0000702ed9e8cd84 shell ls -l /dev/block
total 0
brw------- 1 root root 7, 0 2022-11-29 03:09 loop0
brw------- 1 root root 7, 1 2022-11-29 03:09 loop1
brw------- 1 root root 7, 2 2022-11-29 03:09 loop2
brw------- 1 root root 7, 3 2022-11-29 03:09 loop3
brw------- 1 root root 7, 4 2022-11-29 03:09 loop4
brw------- 1 root root 7, 5 2022-11-29 03:09 loop5
brw------- 1 root root 7, 6 2022-11-29 03:09 loop6
brw------- 1 root root 7, 7 2022-11-29 03:09 loop7
brw------- 1 root root 179, 0 2022-11-29 03:09 mmcblk0
brw------- 1 root root 179, 1 2022-11-29 03:09 mmcblk0p1
brw------- 1 root root 179, 10 2022-11-29 03:09 mmcblk0p10
brw------- 1 root root 179, 11 2022-11-29 03:09 mmcblk0p11
brw------- 1 root root 179, 12 2022-11-29 03:09 mmcblk0p12
brw------- 1 root root 179, 13 2022-11-29 03:09 mmcblk0p13
brw------- 1 root root 179, 14 2022-11-29 03:09 mmcblk0p14
brw------- 1 root root 179, 15 2022-11-29 03:09 mmcblk0p15
brw------- 1 root root 179, 16 2022-11-29 03:09 mmcblk0p16
brw------- 1 root root 179, 17 2022-11-29 03:09 mmcblk0p17
brw------- 1 root root 179, 18 2022-11-29 03:09 mmcblk0p18
brw------- 1 root root 179, 19 2022-11-29 03:09 mmcblk0p19
brw------- 1 root root 179, 2 2022-11-29 03:09 mmcblk0p2
brw------- 1 root root 179, 20 2022-11-29 03:09 mmcblk0p20
brw------- 1 root root 179, 21 2022-11-29 03:09 mmcblk0p21
brw------- 1 root root 179, 22 2022-11-29 03:09 mmcblk0p22
brw------- 1 root root 179, 23 2022-11-29 03:09 mmcblk0p23
brw------- 1 root root 179, 24 2022-11-29 03:09 mmcblk0p24
brw------- 1 root root 179, 25 2022-11-29 03:09 mmcblk0p25
brw------- 1 root root 179, 26 2022-11-29 03:09 mmcblk0p26
brw------- 1 root root 179, 27 2022-11-29 03:09 mmcblk0p27
brw------- 1 root root 179, 28 2022-11-29 03:09 mmcblk0p28
brw------- 1 root root 179, 29 2022-11-29 03:09 mmcblk0p29
brw------- 1 root root 179, 3 2022-11-29 03:09 mmcblk0p3
brw------- 1 root root 179, 30 2022-11-29 03:09 mmcblk0p30
brw------- 1 root root 179, 4 2022-11-29 03:09 mmcblk0p4
brw------- 1 root root 179, 5 2022-11-29 03:09 mmcblk0p5
brw------- 1 root root 179, 6 2022-11-29 03:09 mmcblk0p6
brw------- 1 root root 179, 7 2022-11-29 03:09 mmcblk0p7
brw------- 1 root root 179, 8 2022-11-29 03:09 mmcblk0p8
brw------- 1 root root 179, 9 2022-11-29 03:09 mmcblk0p9
brw------- 1 root root 179, 64 2022-11-29 03:09 mmcblk0rpmb
drwxr-xr-x 3 root root 60 2022-11-29 03:09 platform
drwx------ 2 root root 40 2022-11-29 03:10 vold
brw------- 1 root root 253, 0 2022-11-29 03:10 zram0
brw------- 1 root root 253, 1 2022-11-29 03:09 zram1
>>adb -s 0000702ed9e8cd84 shell ls -l /dev/block/platform/soc/f006d000.MSDC0
total 0
drwxr-xr-x 2 root root 640 2022-11-29 03:09 by-num
lrwxrwxrwx 1 root root 18 2022-11-29 03:09 mmcblk0 -> /dev/block/mmcblk0
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p1 -> /dev/block/mmcblk0p1
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p10 -> /dev/block/mmcblk0p10
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p11 -> /dev/block/mmcblk0p11
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p12 -> /dev/block/mmcblk0p12
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p13 -> /dev/block/mmcblk0p13
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p14 -> /dev/block/mmcblk0p14
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p15 -> /dev/block/mmcblk0p15
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p16 -> /dev/block/mmcblk0p16
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p17 -> /dev/block/mmcblk0p17
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p18 -> /dev/block/mmcblk0p18
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p19 -> /dev/block/mmcblk0p19
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p2 -> /dev/block/mmcblk0p2
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p20 -> /dev/block/mmcblk0p20
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p21 -> /dev/block/mmcblk0p21
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p22 -> /dev/block/mmcblk0p22
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p23 -> /dev/block/mmcblk0p23
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p24 -> /dev/block/mmcblk0p24
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p25 -> /dev/block/mmcblk0p25
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p26 -> /dev/block/mmcblk0p26
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p27 -> /dev/block/mmcblk0p27
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p28 -> /dev/block/mmcblk0p28
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p29 -> /dev/block/mmcblk0p29
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p3 -> /dev/block/mmcblk0p3
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 mmcblk0p30 -> /dev/block/mmcblk0p30
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p4 -> /dev/block/mmcblk0p4
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p5 -> /dev/block/mmcblk0p5
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p6 -> /dev/block/mmcblk0p6
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p7 -> /dev/block/mmcblk0p7
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p8 -> /dev/block/mmcblk0p8
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 mmcblk0p9 -> /dev/block/mmcblk0p9
lrwxrwxrwx 1 root root 22 2022-11-29 03:09 mmcblk0rpmb -> /dev/block/mmcblk0rpmb
>>adb -s 0000702ed9e8cd84 shell ls -l /dev/block/platform/soc/f006d000.MSDC0/by-num
total 0
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p1 -> /dev/block/mmcblk0p1
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p10 -> /dev/block/mmcblk0p10
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p11 -> /dev/block/mmcblk0p11
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p12 -> /dev/block/mmcblk0p12
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p13 -> /dev/block/mmcblk0p13
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p14 -> /dev/block/mmcblk0p14
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p15 -> /dev/block/mmcblk0p15
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p16 -> /dev/block/mmcblk0p16
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p17 -> /dev/block/mmcblk0p17
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p18 -> /dev/block/mmcblk0p18
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p19 -> /dev/block/mmcblk0p19
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p2 -> /dev/block/mmcblk0p2
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p20 -> /dev/block/mmcblk0p20
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p21 -> /dev/block/mmcblk0p21
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p22 -> /dev/block/mmcblk0p22
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p23 -> /dev/block/mmcblk0p23
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p24 -> /dev/block/mmcblk0p24
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p25 -> /dev/block/mmcblk0p25
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p26 -> /dev/block/mmcblk0p26
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p27 -> /dev/block/mmcblk0p27
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p28 -> /dev/block/mmcblk0p28
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p29 -> /dev/block/mmcblk0p29
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p3 -> /dev/block/mmcblk0p3
lrwxrwxrwx 1 root root 21 2022-11-29 03:09 p30 -> /dev/block/mmcblk0p30
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p4 -> /dev/block/mmcblk0p4
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p5 -> /dev/block/mmcblk0p5
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p6 -> /dev/block/mmcblk0p6
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p7 -> /dev/block/mmcblk0p7
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p8 -> /dev/block/mmcblk0p8
lrwxrwxrwx 1 root root 20 2022-11-29 03:09 p9 -> /dev/block/mmcblk0p9
>>adb -s 0000702ed9e8cd84 shell df
Filesystem 1K-blocks Used Available Use% Mounted on
tmpfs 410984 444 410540 1% /dev
tmpfs 410984 0 410984 0% /mnt
/dev/block/mmcblk0p6 1749732 736808 1012924 43% /system
/dev/block/mmcblk0p8 761776 1584 760192 1% /cache
/dev/block/mmcblk0p7 4540976 1644280 2896696 37% /data
/dev/block/mmcblk0p10 37632 37632 0 100% /linux_rootfs
/dev/block/mmcblk0p14 5968 152 5816 3% /3rd_rw
/dev/block/mmcblk0p13 6272 6272 0 100% /3rd
/dev/block/mmcblk0p12 2944 36 2908 2% /perm
tmpfs 410984 13788 397196 4% /tmp
/dev/fuse 4540976 1644280 2896696 37% /mnt/runtime/default/emulated
/dev/fuse 4540976 1644280 2896696 37% /mnt/runtime/read/emulated
/dev/fuse 4540976 1644280 2896696 37% /mnt/runtime/write/emulated
>>adb -s 0000702ed9e8cd84 shell cat /proc/partitions
major minor #blocks name
253 0 296960 zram0
179 0 7634944 mmcblk0
179 1 2048 mmcblk0p1
179 2 2048 mmcblk0p2
179 3 1024 mmcblk0p3
179 4 20480 mmcblk0p4
179 5 20480 mmcblk0p5
179 6 1835008 mmcblk0p6
179 7 4687872 mmcblk0p7
179 8 786432 mmcblk0p8
179 9 1024 mmcblk0p9
179 10 76800 mmcblk0p10
179 11 1024 mmcblk0p11
179 12 7168 mmcblk0p12
179 13 20480 mmcblk0p13
179 14 10240 mmcblk0p14
179 15 1024 mmcblk0p15
179 16 1024 mmcblk0p16
179 17 1024 mmcblk0p17
179 18 1024 mmcblk0p18
179 19 1024 mmcblk0p19
179 20 4096 mmcblk0p20
179 21 4096 mmcblk0p21
179 22 1024 mmcblk0p22
179 23 3072 mmcblk0p23
179 24 1024 mmcblk0p24
179 25 1024 mmcblk0p25
179 26 10240 mmcblk0p26
179 27 1024 mmcblk0p27
179 28 1024 mmcblk0p28
179 29 1024 mmcblk0p29
179 30 256 mmcblk0p30
179 64 512 mmcblk0rpmb
>>adb -s 0000702ed9e8cd84 shell cat /proc/partinfo
dev: offset size name
part01: 00000000 00001000 "uboot"
part02: 00001000 00001000 "uboot_env"
part03: 00002000 00000800 "misc"
part04: 00002800 0000a000 "recovery"
part05: 0000c800 0000a000 "boot"
part06: 00016800 00380000 "system"
part07: 00396800 008f1000 "userdata"
part08: 00c87800 00180000 "cache"
part09: 00e07800 00000800 "reserved"
part10: 00e08000 00025800 "linux_rootfs"
part11: 00e2d800 00000800 "basic"
part12: 00e2e000 00003800 "perm"
part13: 00e31800 0000a000 "3rd_ro"
part14: 00e3b800 00005000 "3rd_rw"
part15: 00e40800 00000800 "reserved"
part16: 00e41000 00000800 "channelA"
part17: 00e41800 00000800 "channelB"
part18: 00e42000 00000800 "pq"
part19: 00e42800 00000800 "aq"
part20: 00e43000 00002000 "logo"
part21: 00e45000 00002000 "bootlogo"
part22: 00e47000 00000800 "tzbp"
part23: 00e47800 00001800 "adsp"
part24: 00e49000 00000800 "ciplus"
part25: 00e49800 00000800 "part_24"
part26: 00e4a000 00005000 "upgrade"
part27: 00e4f000 00000800 "part_26"
part28: 00e4f800 00000800 "part_27"
part29: 00e50000 00000800 "eeprom_A"
part30: 00e50800 00000200 "sch_pvr"
>>adb -s 0000702ed9e8cd84 shell df
Filesystem 1K-blocks Used Available Use% Mounted on
tmpfs 410984 444 410540 1% /dev
tmpfs 410984 0 410984 0% /mnt
/dev/block/mmcblk0p6 1749732 736808 1012924 43% /system
/dev/block/mmcblk0p8 761776 1584 760192 1% /cache
/dev/block/mmcblk0p7 4540976 1644300 2896676 37% /data
/dev/block/mmcblk0p10 37632 37632 0 100% /linux_rootfs
/dev/block/mmcblk0p14 5968 152 5816 3% /3rd_rw
/dev/block/mmcblk0p13 6272 6272 0 100% /3rd
/dev/block/mmcblk0p12 2944 36 2908 2% /perm
tmpfs 410984 13788 397196 4% /tmp
/dev/fuse 4540976 1644300 2896676 37% /mnt/runtime/default/emulated
/dev/fuse 4540976 1644300 2896676 37% /mnt/runtime/read/emulated
/dev/fuse 4540976 1644300 2896676 37% /mnt/runtime/write/emulated
[email protected] said:
Hi, my name is Kaleb, I am somewhat new to the android Rom development process. I have a Haier 43" LED Smart TV that I wish to make better by developing a custom Google or Android TV Rom. This Rom won't be for me alone however, it would be nice to turn these useless smart TVs into sumen a little better. It may not have much RAM, hover i have seen android 12 run on an ancient Samsung galaxy, so i have faith that this could be a great project and challenge.
Below I attached the files I could have gotten form the device. I would try daily to see how far i can get, I am still looking for decent tools to get the entire firmware out. If you have any recommendations, please send them my way.
Click to expand...
Click to collapse
Manage to pull boot, recovery and system files:
Android TV Development - MT5863 - Google Drive
drive.google.com

Categories

Resources