I got it into EDL mode by a combination of power button/home button manipulations. But it's tough, most of the time, I run: edl --loader=Loaders/qualcomm/factory/sdm636/000cc0e100000000_7be49b72f9e43372_fhprg_bqx2_peek. bin
and the output ends with
sahara - Uploading loader Loaders/qualcomm/factory/sdm636/000cc0e100000000_7be49b72f9e43372_fhprg_bqx2_peek. bin ...
Error, couldn't find suitable enprg/nprg loader
But if I let go at a certain time, I manage to get into a mode where it does load successfully, and then I get what I put in #6, but its tough to get the timing right. I'm trying to recreate and video-recording while doing it to try to figure out what combination works.
Maybe I should try the hardware method, let me try posting the photos again. Actually, looks like my post #6 came through with them, the spam filter must not have liked the URLs.