Database Users

How to restore a borked M9+ from a non-borked device

Hi.
I have two HTC M9+ phones, one is the rose gold type and the other is gunmetal, details below:
rose gold
(bootloader) kernel: lk
(bootloader) product: htc_hiau_ml_tuhl
(bootloader) version: 1.0
(bootloader) imei: xxxxxxxxxxxxxxxx
(bootloader) version-main: 2.30.401.1
(bootloader) boot-mode: download
(bootloader) version-baseband: READ version-baseband ERROR
(bootloader) version-bootloader: 1.01.0000
(bootloader) mid: 0PK711000
(bootloader) cid: HTC__J15
gunmetal
(bootloader) kernel: lk
(bootloader) product: htc_hiau_ml_tuhl
(bootloader) version: 1.0
(bootloader) imei: xxxxxxxxxxxxxxxx
(bootloader) version-main: 2.27.401.1
(bootloader) boot-mode: download
(bootloader) version-baseband: READ version-baseband ERROR
(bootloader) version-bootloader: 1.01.0000
(bootloader) mid: 0PK711000
(bootloader) cid: HTC__J15
On the gunmetal one I installed TWRP and rooted it, but being a noob I didn't fully update it first and now I can't take an OTA. My whole approach was wrong I think. I'd like to get the gun metal one back to stock and start again and was wondering if I could use the working one to do so. I did a lot of research trying various ways to back up the working phone:
Trying to boot CWM via fastboot boot so I could create a backup. Apparently this won't work on this phone.
Trying MTKDroidTools / SPFlash, but it seems the MTK6795 isn't supported with those tools
Using ADB to backup, but since my phone is not rooted it will not work. From what I understand if the phone is rooted and/or the root partition was mounted read/write you won't be able to take an OTA so this method wont work either.
Is there another method I am missing where I could backup my entire working phone to flash the one I messed up? I know RUU is a possibility but I'd really like to go this route instead as all most of the locations to download RUU's seem a bit sketchy. Should I even be concerned with this if I can find a signed RUU?
THanks for any help.
simon

Ultra U boot loop - stock rom request

Hello,
I have a Ultra U, which was stuck in some kind of boot loop / boot screen after a potential update.
I would like to flash a stock rom as the device is and should remain locked and as stock as possible.
Tried already to wipe data/factory reset but without any success.
Where do I find the stock rom? And how to intall it?
Here is the information shown in recovery / fastboot mode:
S-ON
LOCKED
Recovery:
00401/htc_oceuhl
8.0.0/OPRT.170623.032/1031237.1
HTC Download mode:
*** LOCKED ***
*** FUSED (PRODUCTION)***
htc_oceuhl PCT S-ON
LK-1.0.0.0000
[email protected]
OpenDSP-v24.0.8996.00007_1206_OCE
OS-2.21.401.1
Mar 16 2018,12:21:47(1031237)
HTC TOOLKIT:
(bootloader) kernel: lk
(bootloader) product: htc_oceuhl
(bootloader) version: 1.0
(bootloader) max-download-size: 1578400000
(bootloader) serialno: xxxxxx
(bootloader) slot-count: 0
(bootloader) current-slot:
(bootloader) imei: xxxxxxx
(bootloader) version-main: 2.21.401.1
(bootloader) boot-mode: download
(bootloader) version-baseband: [email protected]
(bootloader) version-bootloader: 1.0.0.0000
(bootloader) mid: 2PZF10000
(bootloader) cid: HTC__034
all:
finished. total time: 0.049s
Thanks and regards

ultauuser said:
Hello,
I have a Ultra U, which was stuck in some kind of boot loop / boot screen after a potential update.
I would like to flash a stock rom as the device is and should remain locked and as stock as possible.
Tried already to wipe data/factory reset but without any success.
Where do I find the stock rom? And how to intall it?
Here is the information shown in recovery / fastboot mode:
S-ON
LOCKED
Recovery:
00401/htc_oceuhl
8.0.0/OPRT.170623.032/1031237.1
HTC Download mode:
*** LOCKED ***
*** FUSED (PRODUCTION)***
htc_oceuhl PCT S-ON
LK-1.0.0.0000
[email protected]
OpenDSP-v24.0.8996.00007_1206_OCE
OS-2.21.401.1
Mar 16 2018,12:21:47(1031237)
HTC TOOLKIT:
(bootloader) kernel: lk
(bootloader) product: htc_oceuhl
(bootloader) version: 1.0
(bootloader) max-download-size: 1578400000
(bootloader) serialno: xxxxxx
(bootloader) slot-count: 0
(bootloader) current-slot:
(bootloader) imei: xxxxxxx
(bootloader) version-main: 2.21.401.1
(bootloader) boot-mode: download
(bootloader) version-baseband: [email protected]
(bootloader) version-bootloader: 1.0.0.0000
(bootloader) mid: 2PZF10000
(bootloader) cid: HTC__034
all:
finished. total time: 0.049s
Thanks and regards
Click to expand...
Click to collapse
Do you have found an OTA.zip file?
I need it too, I have the same problem as you...
david133

Hi,
if you're able to access the phone via fastboot, you can try the following method:
https://forum.xda-developers.com/u-ultra/help/howto-unbrick-ultra-t3891033
Greetings

Try this one:
2PZFIMG_OCEAN_NOT[email protected]80307_63.34_release_522808_signed_2_4 .zip
Rename the file to "2PZFIMG.zip" and place it in root of sdcard. Boot into download mode and confirm flash with volume+ button

Returning to stock with no recovery or OS - only download mode?

Hey,
I think I have truly messed my device up - I was running another ROM for a while and wanted to return to stock. After many hours of stupid decisions, I am left with a phone that has no recovery or OS, and is bootloader locked. Here are my vars.
$ fastboot getvar all
(bootloader) kernel: lk
(bootloader) product: htc_oceuhl
(bootloader) version: 1.0
(bootloader) max-download-size: 1578400000
(bootloader) serialno: FA72N1700911
(bootloader) slot-count: 0
(bootloader) current-slot:
(bootloader) imei: 355166080305519
(bootloader) version-main: 2.21.401.12
(bootloader) boot-mode: download
(bootloader) version-baseband: [email protected]
(bootloader) version-bootloader: 1.0.0.0000
(bootloader) mid: 2PZF10000
(bootloader) cid: HTC__034
Any tips on what to do?

So I think I can install an OTA via the sdcard and download mode, however
(bootloader) version-main: 2.21.401.12
is stopping me. For some reason the version is higher than any OTA I can find?! I know there is a tool to change this version, however it relies on adb (and I think root).

brickyMcBrickface said:
So I think I can install an OTA via the sdcard and download mode, however
(bootloader) version-main: 2.21.401.12
is stopping me. For some reason the version is higher than any OTA I can find?! I know there is a tool to change this version, however it relies on adb (and I think root).
Click to expand...
Click to collapse
Do you have found an OTA.zip file?
I need it too, I have the same problem as you...
david133

Hi,
if you're able to access the phone via fastboot, you can try the following method:
https://forum.xda-developers.com/u-ultra/help/howto-unbrick-ultra-t3891033
Greetings

[HELP] Unlocking the booloader of Amazon Echo Show 2nd Gen

Hello,
I want to know if someone can help me unlocking the bootloader of this device for installing custom rom/apps
It has an Intel Cherry Trail Processor
I can boot to fastboot using the Vol- and Power together and tried the following commands
fastboot oem unlock - returns OKAY but doesn't unlock the bootloader
Code:
fastboot oem lock
- returns that the device is already in the required state
Code:
fastboot flash twrp.img
- returns that it cannot be possible since the device is locked
Code:
fastboot boot twrp.img
- goes to the amazon logo and then right to fastboot again
Code:
fastboot getvar all
(bootloader) serialno: ------------------------ [hidden for purposes]
(bootloader) board: Intel Corp. Cherry Trail CR 0
(bootloader) device-state: locked
(bootloader) boot-state: GREEN
(bootloader) firmware: Intel Corporation CH2T.BSHP.X64.0005.R09.18091217
(bootloader) product-name: CHERRYVIEW D1 PLATFORM
(bootloader) secureboot: yes
(bootloader) off-mode-charge: 1
(bootloader) unlocked: no
(bootloader) secure: yes
(bootloader) partition-type:vendor: ext4
(bootloader) partition-size:vendor: 0x0000000016C00000
(bootloader) partition-type:userdata: ext4
(bootloader) partition-size:userdata: 0x00000000FA800000
(bootloader) partition-type:data: ext4
(bootloader) partition-size:data: 0x00000000FA800000
(bootloader) partition-type:system: ext4
(bootloader) partition-size:system: 0x000000008CC00000
(bootloader) partition-type:cache: ext4
(bootloader) partition-size:cache: 0x0000000020000000
(bootloader) partition-type:factory: none
(bootloader) partition-size:factory: 0x0000000002000000
(bootloader) partition-type:recovery: none
(bootloader) partition-size:recovery: 0x0000000002000000
(bootloader) partition-type:boot: none
(bootloader) partition-size:boot: 0x0000000002000000
(bootloader) partition-type:metadata: none
(bootloader) partition-size:metadata: 0x0000000001000000
(bootloader) partition-type:config: ext4
(bootloader) partition-size:config: 0x0000000000800000
(bootloader) partition-type:misc: none
(bootloader) partition-size:misc: 0x0000000000100000
(bootloader) partition-type:persistent: ext4
(bootloader) partition-size:persistent: 0x0000000000100000
(bootloader) partition-type:bootloader2: none
(bootloader) partition-size:bootloader2: 0x0000000004000000
(bootloader) partition-type:bootloader: vfat
(bootloader) partition-size:bootloader: 0x0000000004000000
(bootloader) max-download-size: 0x0000000010000000
(bootloader) battery-voltage:
(bootloader) version-bootloader: kernelflinger-02.19
(bootloader) device-type: PROD
(bootloader) product: bishop
all:
Finished. Total time: 1.098s
I can also boot into DNX FASTBOOT MODE using all 3 buttons, but I can't do anything in that mode, but the device is recognized using fastboot devices
Does anyone know how to use dnx fastboot mode? Or what is it?
Thank you

Wrong command
Hey! You should be using fastboot OEM unlock, not fastboot OEM lock. Also the unit doesn't have a way to enable adb from what I can tell.

Note: I have NO experience hacking amazon echo
Could you use the same method we use to hack the fire HD8 or HD10 with the brick.sh, then flash the bootrom, then enter a hacked fastboot? From what it looks like, recovery mode on the show looks like the same one used on the HD10.

Echo Show need to unlock
Hello
I tried with the following commands.
I tried with "fastboot oem unlock", but command is not working.
I want to unlock my amazon echo show devices. Or is there any way to open echo show without login with amazon account.
Please help me to solve the issue.
arcanandrei said:
Hello,
I want to know if someone can help me unlocking the bootloader of this device for installing custom rom/apps
It has an Intel Cherry Trail Processor
I can boot to fastboot using the Vol- and Power together and tried the following commands
fastboot oem unlock - returns OKAY but doesn't unlock the bootloader
Code:
fastboot oem lock
- returns that the device is already in the required state
Code:
fastboot flash twrp.img
- returns that it cannot be possible since the device is locked
Code:
fastboot boot twrp.img
- goes to the amazon logo and then right to fastboot again
Code:
fastboot getvar all
(bootloader) serialno: ------------------------ [hidden for purposes]
(bootloader) board: Intel Corp. Cherry Trail CR 0
(bootloader) device-state: locked
(bootloader) boot-state: GREEN
(bootloader) firmware: Intel Corporation CH2T.BSHP.X64.0005.R09.18091217
(bootloader) product-name: CHERRYVIEW D1 PLATFORM
(bootloader) secureboot: yes
(bootloader) off-mode-charge: 1
(bootloader) unlocked: no
(bootloader) secure: yes
(bootloader) partition-type:vendor: ext4
(bootloader) partition-size:vendor: 0x0000000016C00000
(bootloader) partition-type:userdata: ext4
(bootloader) partition-size:userdata: 0x00000000FA800000
(bootloader) partition-type:data: ext4
(bootloader) partition-size:data: 0x00000000FA800000
(bootloader) partition-type:system: ext4
(bootloader) partition-size:system: 0x000000008CC00000
(bootloader) partition-type:cache: ext4
(bootloader) partition-size:cache: 0x0000000020000000
(bootloader) partition-type:factory: none
(bootloader) partition-size:factory: 0x0000000002000000
(bootloader) partition-type:recovery: none
(bootloader) partition-size:recovery: 0x0000000002000000
(bootloader) partition-type:boot: none
(bootloader) partition-size:boot: 0x0000000002000000
(bootloader) partition-type:metadata: none
(bootloader) partition-size:metadata: 0x0000000001000000
(bootloader) partition-type:config: ext4
(bootloader) partition-size:config: 0x0000000000800000
(bootloader) partition-type:misc: none
(bootloader) partition-size:misc: 0x0000000000100000
(bootloader) partition-type:persistent: ext4
(bootloader) partition-size:persistent: 0x0000000000100000
(bootloader) partition-type:bootloader2: none
(bootloader) partition-size:bootloader2: 0x0000000004000000
(bootloader) partition-type:bootloader: vfat
(bootloader) partition-size:bootloader: 0x0000000004000000
(bootloader) max-download-size: 0x0000000010000000
(bootloader) battery-voltage:
(bootloader) version-bootloader: kernelflinger-02.19
(bootloader) device-type: PROD
(bootloader) product: bishop
all:
Finished. Total time: 1.098s
I can also boot into DNX FASTBOOT MODE using all 3 buttons, but I can't do anything in that mode, but the device is recognized using fastboot devices
Does anyone know how to use dnx fastboot mode? Or what is it?
Thank you
Click to expand...
Click to collapse

All Amazon echo show devices required unlock code which is generated from the serial number to unlock the devices.
Unfortunately this unlock code can be only retrieved inside amazon corp network through their internal tool for developing purpose.

Hello! I bought a second hand show 5 and the former owner has the account locked out. I can not do anything. When I go into configuration it tells me that it does not recognize the account in amazon.
I have thought that if I can change the serial number of the device, I could finish the configuration correctly.
Code:
fastboot getvar all
(bootloader) antirback_tee_version: 0x0103
(bootloader) antirback_lk_version: 0x0001
(bootloader) antirback_pl_version: 0x0001
(bootloader) rpmb_state: 1
(bootloader) lk_build_desc: cd178e6-20190703_190118
(bootloader) pl_build_desc: d14f08f-20190512_232119
(bootloader) secure: yes
(bootloader) prod: 1
(bootloader) otu_code: +QdtQ0mzlUklt9mtCmRNAYIKNnfW6akA
(bootloader) unlock_status: false
(bootloader) unlock_code: 0x???????????????????? [hidden for purposes]
(bootloader) serialno: ???????????????? [hidden for purposes]
(bootloader) max-download-size: 0x6d00000
(bootloader) off-mode-charge: 1
(bootloader) warranty: no
(bootloader) kernel: lk
(bootloader) product: CHECKERS
(bootloader) version-preloader: 0.1.00
(bootloader) version: 0.5
all: Done!!
Finished. Total time: 0.018s
I have tried this:
Code:
sudo fastboot oem unlock 0xMy_onlock_code
FAILED (remote: 'the command you input is restricted on locked hw')
fastboot: error: Command failed
I cannot access adb.
Any ideas to root or start adb from fastboot?
Any ideas to unlink the old user's account?
I already did a factory reset. Sorry for my english.

Hello , have any sucess?

halfblood* said:
Hello , have any sucess?
Click to expand...
Click to collapse
I got the bootloader unlock code just now using power and both volume buttons to boot fstboot then plugged my phone into micro USB on back running bugajager app

I have had some success using Bugjaeger on my android phone while attached to a couple of uncooperative devices, namely my Tesla style head unit, as well a "Class VR" headset I picked up on eBay . The headset was locked down fairly well, but it was no match for Bugjaeger. I ended up able to load my own launcher, and now it acts like any other rooted android. There may be other tools that can help, I am just sharing my experience with one app. Hope this helps. R*

memorixo said:
Hello! I bought a second hand show 5 and the former owner has the account locked out. I can not do anything. When I go into configuration it tells me that it does not recognize the account in amazon.
I have thought that if I can change the serial number of the device, I could finish the configuration correctly.
Code:
fastboot getvar all
(bootloader) antirback_tee_version: 0x0103
(bootloader) antirback_lk_version: 0x0001
(bootloader) antirback_pl_version: 0x0001
(bootloader) rpmb_state: 1
(bootloader) lk_build_desc: cd178e6-20190703_190118
(bootloader) pl_build_desc: d14f08f-20190512_232119
(bootloader) secure: yes
(bootloader) prod: 1
(bootloader) otu_code: +QdtQ0mzlUklt9mtCmRNAYIKNnfW6akA
(bootloader) unlock_status: false
(bootloader) unlock_code: 0x???????????????????? [hidden for purposes]
(bootloader) serialno: ???????????????? [hidden for purposes]
(bootloader) max-download-size: 0x6d00000
(bootloader) off-mode-charge: 1
(bootloader) warranty: no
(bootloader) kernel: lk
(bootloader) product: CHECKERS
(bootloader) version-preloader: 0.1.00
(bootloader) version: 0.5
all: Done!!
Finished. Total time: 0.018s
I have tried this:
Code:
sudo fastboot oem unlock 0xMy_onlock_code
FAILED (remote: 'the command you input is restricted on locked hw')
fastboot: error: Command failed
I cannot access adb.
Any ideas to root or start adb from fastboot?
Any ideas to unlink the old user's account?
I already did a factory reset. Sorry for my english.
Click to expand...
Click to collapse
Hi! Have you managed to do anything with it? I have a locked echo show 8, which I'm trying hard on finding a way to unlock it... Would very much appreciate any help on this matter, thanks!

Stuck in bootloop after flat battery

(bootloader) kernel: lk
(bootloader) product: htc_oceuhl
(bootloader) version: 1.0
(bootloader) max-download-size: 1578400000
(bootloader) serialno: ****
(bootloader) slot-count: 0
(bootloader) current-slot:
(bootloader) imei: ****
(bootloader) version-main: 2.27.710.1
(bootloader) boot-mode: download
(bootloader) version-baseband: [email protected]
(bootloader) version-bootloader: 1.0.0.0000
(bootloader) mid: 2PZF10000
(bootloader) cid: HTC__039
I'm at my wits end here, I've been trying to find an RUU or a firmware version or anything to try and fix the bootloop my Ultra U is in after it had a flat battery. I have factory reset it as well as cleared cache in the recovery menu, but it still freezes and reboots a few minutes into loading the OS. I am unable to proceed beyond the initial setup. Telstra won't touch it because its warranty expired a month ago. I've exhausted almost every option beside flashing the device in an attempt to maybe fix a corrupt file
I don't care about the data on it, or if I have to root it or anything. I just want to get my device back into some form of working order as I can't afford to pay for it to be repaired or replaced.
Please XDA, tell me there's some light at the end of the tunnel