Database Users

Moto G4 Plus (XT1641) Android Nougat 7.0 Softbricked after installing SuperSu

I was trying to root my Moto G4 Plus (XT1641) (Dual SIM bought in Wallmart, Mexico), installed the superuser-zip file, but it never loaded. Heres the deatiled info:
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
(bootloader) version: 0.5
(bootloader) version-bootloader: moto-msm8952-B1.03
(bootloader) product: athene_16mp
(bootloader) board: athene_16mp
(bootloader) secure: yes
(bootloader) hwrev: P2A
(bootloader) radio: 5
(bootloader) storage-type: emmc
(bootloader) emmc: 32GB SAMSUNG QX13MB RV=08 PV=07 FV=0000000000000007
(bootloader) ram: 2GB SAMSUNG LP3 DIE=8Gb M5=01 M6=05 M7=00 M8=1F
(bootloader) cpu: MSM8952
(bootloader) serialno: (**********)
(bootloader) cid: 0x0032
(bootloader) channelid: 0x22
(bootloader) uid: B129A00000000000000000000000
(bootloader) securestate: flashing_unlocked
(bootloader) iswarrantyvoid: yes
(bootloader) max-download-size: 536870912
(bootloader) reason: Volume down key pressed
(bootloader) imei: 354116070814435
(bootloader) meid:
(bootloader) date: 05-21-2016
(bootloader) sku: XT1641
(bootloader) battid: SNN5966A
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Fri Apr 14 10:46:36 UTC 2017"
(bootloader) ro.build.fingerprint[0]: motorola/athene_f/athene_f:7.0/NPJ
(bootloader) ro.build.fingerprint[1]: 25.93-14/16:user/release-keys
(bootloader) ro.build.version.full[0]: Blur_Version.25.11.16.athene.reta
(bootloader) ro.build.version.full[1]: il.en.US
(bootloader) ro.build.version.qcom: LA.BR.1.3.6-01710-8976.0
(bootloader) version-baseband[0]: M8952_70030.25.03.62R ATHENE_LATAM_DSD
(bootloader) version-baseband[1]: S_CUST
(bootloader) kernel.version[0]: Linux version 3.10.84-g478d03a (hudsoncm
(bootloader) kernel.version[1]: @ilclbld26) (gcc version 4.8 (GCC) ) #1
(bootloader) kernel.version[2]: SMP PREEMPT Fri Jan 6 05:12:56 CST 2017
(bootloader) sbl1.git: git=MBM-NG-VB1.03-0-ge433b40
(bootloader) rpm.git: git=a970ead
(bootloader) tz.git: git=119e5b2-dirty
(bootloader) hyp.git: git=119e5b2-dirty
(bootloader) keymaster.git: git=119e5b2-dirty
(bootloader) cmnlib.git: git=119e5b2-dirty
(bootloader) aboot.git: git=MBM-NG-VB1.03-0-gb44c0ee
(bootloader) qe: qe 0/0
(bootloader) frp-state: no protection (0)
(bootloader) ro.carrier: retmx
all: listed above
finished. total time: 0.102s
-First, i had to get the unlock bootloader code from Motorola following the steps on the website
(1) https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-a
(2) https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-b
(3) https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-c
And it was the result:
C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot oem unlock (******************)
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
...
(bootloader) invalid boot state
OKAY [ 0.006s]
finished. total time: 0.007s
but, as it said in the las section, my device appears to succesfuly unlocked bootloader:
(bootloader) securestate: flashing_unlocked
(bootloader) iswarrantyvoid: yes
- Following the next post https://forum.xda-developers.com/moto-g4-plus/how-to/guide-how-root-nougat-moto-g4-plus-t3484672 i installled Minimal ADB and Fastboot on my pc, and flashed twrp-3.1.0-0-athene.img. BUT, I DIDN´T NOTICE THE WARNING ON TOP OF THE POST: "If you are on NPJ25.93-11/12/14 (non-soak test Nougat), you MUST flash the ElementalX kernel (link) after step 4. Make sure to backup the stock kernel before proceeding". (and honestly i have no f****** idea if i was on NPJ25.93-11/12/14). I finished installing that post's phh's SuperUser, and Voila!, it didn't worked
-After loking for any solutions to this issue, i've found this post: https://forum.xda-developers.com/moto-g4/how-to/how-to-root-g4-fix-bootable-attempted-t3417592 and tried rooting and tried typing echo SYSTEMLESS=true>>/data/.supersu on the TWRP's terminal and using it's SuperSU file.
-Also: I forgot to make an Backup on TWRP :crying: before installing my first superuser file
I can acces bootloader on my cellphone and TWRP witouth problem, so it's softbricked.
1: How can i finish rooting my device and make ti work? or
2: Is there any way i could reinstall the OS (nougat or Lollipop) using any recovery file, re-stock, re-lock or something?

Okay, a few things from what I see from your post:
You're on NPJ25.93-14/16 (from your getvar infor fingerprint), so that build requires ElementalX or another custom kernel. I think that requirement stands for any Nougat build on Moto G4 devices anyway, since Google appears to have enforced kernel security under Nougat.
Regardless, you'll need to flash a custom kernel to get any root solution (or somehow bypass dm-verity), else you won't be able to boot. You may be able to copy ElementalX (https://forum.xda-developers.com/moto-g4-plus/development/kernel-elementalx-g4-0-01-t3424836) to a SD card, or use the 'adb push' commands from your adb terminal to push the file onto your device.
Then, you may be able to boot into TWRP, flash the ElementalX kernel, wipe your cache/Dalvik then reboot.
If your device boots, then you may wish to check if phh Superuser is still active.
If no root is present, reboot into TWRP and then flash phh Superuser.
If you still get bootloops or are unable to get ElementalX onto your device, you may wish to flash the stock Nougat ROM (same build as what you have currently) from here: https://forum.xda-developers.com/moto-g4-plus/how-to/moto-g4-plus-xt1640-43-athene-npj25-93-t3549369 This will wipe TWRP and any root present (as your kernel and recovery will be stock again), you do not have to re-lock your bootloader if you choose not to, and if you do not use 'fastboot erase userdata' and the OEM lock commands, you may be able to retain your data (though hopefully someone else can chime in on this point). However, for a stable system, I'd recommend using all the erase commands as listed (which potentially means losing your data)
EDIT - from toppits' post here (https://forum.xda-developers.com/showpost.php?p=71461568&postcount=64), you may be able to use these commands for the fastboot ROM (may save your data if you choose to re-flash the fastboot stock ROM):
Code:
fastboot flash logo logo.bin
fastboot flash boot boot.img
fastboot flash recovery recovery.img
fastboot flash dsp adspso.bin
fastboot flash oem oem.img
fastboot flash system system.img_sparsechunk.0
fastboot flash system system.img_sparsechunk.1
fastboot flash system system.img_sparsechunk.2
fastboot flash system system.img_sparsechunk.3
fastboot flash system system.img_sparsechunk.4
fastboot flash system system.img_sparsechunk.5
fastboot flash system system.img_sparsechunk.6
fastboot flash system system.img_sparsechunk.7
As always, you may have to erase your data if your system becomes unstable, but hopefully you may be able to boot and recover your data. You may then wish to continue on with your system as is or, after backing up your data, fully wipe and re-flash to get a stable system.

[solved] failed to load kernel - cant do anything

hey,
I am a noob when it comes to rooting devices and I kinda ****ed up on my 2 year old device.
When I try to start my device, I get this error:
Start up failed:
Your device didnt start up successfully. Use the Software Repair Assistant on computer to repair your device.
Connect your device to your computer to get the Software Repair Assistant.
AP Fastboot Flash Mode (Secure)
Fastboot Reason: Volume key pressed
USB connected
cmd: getvar:slot-count
cmd: getvar:slot-suffixes
cmd: getvar:slot-suffixes(note: yes, 2 times)
cmd: getvar:has-slot:recovery
cmd: getvar: partition-type:recovery
cmd: getvar:max-download-size
cmd: download:009ff000
cmd: flash:recovery
Error: failed to load kernel!
Boot up failed
my problem is, that no matter how I try to start or factory reset my phone, I sooner or later land on that screen. I can use fastboot commands just fine, but I dont know which I need to use. TWRP cant be started, because I need to press "Recovery Mode" at one point which sends me back to the above error.
I am stuck since half a day and I honestly cant figure it out myself. I hope you can help me to root my phone. many thanks,
Termii
Edit 1: trying the following commands:
C:\Users\Desktop\reboot\platform-tools>fastboot devices
ZY2245QMTN fastboot
C:\Users\Desktop\reboot\platform-tools>fastboot erase recovery
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
(bootloader) has-slot:recovery: not found
erasing 'recovery'...
(bootloader) Permission denied
FAILED (remote failure)
finished. total time: 0.007s
C:\Users\Desktop\reboot\platform-tools>fastboot flash recovery recovery.img (note: recovery = TWRP 3.1.1-0 Moto G5S Plus [sanders])
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
(bootloader) has-slot:recovery: not found
target reported max download size of 536870912 bytes
sending 'recovery' (10236 KB)...
OKAY [ 0.284s]
writing 'recovery'...
(bootloader) Image not signed or corrupt
OKAY [ 0.231s]
finished. total time: 0.519s
C:\Users\Desktop\reboot\platform-tools>fastboot reboot
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
rebooting...
finished. total time: 0.007s
the error my moto shows me:
Start up failed:
Your device didnt start up successfully. Use the Software Repair Assistant on computer to repair your device.
Connect your device to your computer to get the Software Repair Assistant.
AP Fastboot Flash Mode (Secure)
Error: failed to load kernel!
Fastboot Reason: Fall-through from recovery boot mode USB connected
Edit 2:
C:\Users\Desktop\reboot\platform-tools>fastboot getvar all
(bootloader) slot-count: not found
(bootloader) slot-suffixes: not found
(bootloader) slot-suffixes: not found
(bootloader) version: 0.5
(bootloader) version-bootloader: moto-msm8953-C0.8A(*)
(bootloader) product: potter
(bootloader) board: potter
(bootloader) secure: yes
(bootloader) hwrev: P3B
(bootloader) radio: 3
(bootloader) storage-type: emmc
(bootloader) emmc: 32GB SAMSUNG RX1BMB RV=08 PV=07 FV=0000000000000007
(bootloader) ram: 3GB SAMSUNG LP3 DIE=6Gb M5=01 M6=05 M7=00 M8=7B
(bootloader) cpu: MSM8953
(bootloader) serialno: ZY2245QMTN
(bootloader) cid: 0x0032
(bootloader) channelid: 0x40
(bootloader) uid: 24F61D6D00000000000000000000
(bootloader) securestate: flashing_unlocked
(bootloader) iswarrantyvoid: yes
(bootloader) max-download-size: 536870912
(bootloader) reason: Fall-through from recovery boot mode
(bootloader) imei: ********
(bootloader) meid:
(bootloader) date: 05-16-2017
(bootloader) sku: XT1685
(bootloader) battid:
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Sun Jun 14 3:14:15 UTC 1970"
(bootloader) ro.build.fingerprint[0]: motorola/potter_n/potter_n:7.0/NPN
(bootloader) ro.build.fingerprint[1]: S25.137-33-11/11:user/release-keys
(bootloader) poweroffalarm: 1
(bootloader) ro.build.version.full[0]: Blur_Version.25.226.11.potter.ret
(bootloader) ro.build.version.full[1]: ail.en.US
(bootloader) ro.build.version.qcom: LA.UM.5.6.r1-01900-89xx.0
(bootloader) version-baseband: M8953_02.03.07.06R POTTER_EMEADSDS_CUST
(bootloader) kernel.version[0]: Linux version 3.18.31-perf-g64ca40a-0012
(bootloader) kernel.version[1]: 8-g77c6b6b ([email protected]) (gcc ve
(bootloader) kernel.version[2]: rsion 4.9 20150123 (prerelease) (GCC) )
(bootloader) kernel.version[3]: #1 SMP PREEMPT Tue Aug 8 08:37:28 CDT 20
(bootloader) kernel.version[4]: 17
(bootloader) sbl1.git: git=MBM-NG-VC0.8A-0-gc33529e
(bootloader) rpm.git: git=MBM-NG-VC0.C0-1-g202d600
(bootloader) tz.git: git=6c4172f-dirty
(bootloader) devcfg.git: git=6c4172f-dirty
(bootloader) keymaster.git: git=6c4172f-dirty
(bootloader) cmnlib.git: git=6c4172f-dirty
(bootloader) cmnlib64.git: git=6c4172f-dirty
(bootloader) prov.git: git=6c4172f-dirty
(bootloader) aboot.git: git=MBM-NG-VC0.8A-0-gc90d6a9-dirty
(bootloader) qe: qe 0/0
(bootloader) frp-state: no protection (0)
(bootloader) ro.carrier: reteu
all: listed above
finished. total time: 0.177s

solution
it seems I got my phone fixed with this guide: https://forum.xda-developers.com/g5...romfactory-t3691396/post74221633#post74221633

termii10 said:
it seems I got my phone fixed with this guide: https://forum.xda-developers.com/g5...romfactory-t3691396/post74221633#post74221633
Click to expand...
Click to collapse
You might want to edit out your IMEI from the post.

thanks. what is it for btw?

termii10 said:
thanks. what is it for btw?
Click to expand...
Click to collapse
It uniquely IDs a mobile phone, used by carriers to identify stolen devices and disconnect them from the network. If someone else gets a hold of it, they could use it for their illegal device rendering your phone unusable.

termii10 said:
it seems I got my phone fixed with this guide: https://forum.xda-developers.com/g5...romfactory-t3691396/post74221633#post74221633
Click to expand...
Click to collapse
This worked for me as well.

Failed to load Kernel.
Hi dear team,
here's my situation,
When phone is just starting appears a N/A symbol, after that I receive "Start up failed: Your device didnt start up successfully. Use the Software Repair ... etc" message, as well I get the "failed to load kernel". and "fastboot reason fall-through from charger boot mode" message on red letters.
I tried to do the flash stock rom(factory image) via fastboot but when process finish and I reboot phone, still happens the same, I selected the correct stock rom according to my phone model. Phone has bootloader unlocked.
Idk what else I can do. I really appreciate if you can give me a hand.
Greetings

Tropicalvibes said:
Hi dear team,
here's my situation,
When phone is just starting appears a N/A symbol, after that I receive "Start up failed: Your device didnt start up successfully. Use the Software Repair ... etc" message, as well I get the "failed to load kernel". and "fastboot reason fall-through from charger boot mode" message on red letters.
I tried to do the flash stock rom(factory image) via fastboot but when process finish and I reboot phone, still happens the same, I selected the correct stock rom according to my phone model. Phone has bootloader unlocked.
Idk what else I can do. I really appreciate if you can give me a hand.
Greetings
Click to expand...
Click to collapse
I suggest you to use lenovo moto smart assistant app to flash the device, as it will flash your device for you.

riyan65 said:
I suggest you to use lenovo moto smart assistant app to flash the device, as it will flash your device for you.
Click to expand...
Click to collapse
thanks for your answer, I did it already, it does not work cuz it cannot get enough information from the phone.

Tropicalvibes said:
Failed to load Kernel.
Hi dear team,
here's my situation,
When phone is just starting appears a N/A symbol, after that I receive "Start up failed: Your device didnt start up successfully. Use the Software Repair ... etc" message, as well I get the "failed to load kernel". and "fastboot reason fall-through from charger boot mode" message on red letters.
I tried to do the flash stock rom(factory image) via fastboot but when process finish and I reboot phone, still happens the same, I selected the correct stock rom according to my phone model. Phone has bootloader unlocked.
Idk what else I can do. I really appreciate if you can give me a hand.
Greetings
Click to expand...
Click to collapse
hello, could you solve it?

Moto G7 (Soft brick?)

Hi Guys, i have a moto g7 1962-4.
After flashed the lineage os rom, and installed wrong modules, i decided to install the Havoc Os, after that, my cellphone's restarted on the fastboot(secure) screen.
The oem_turns to lock, says oem_lock
and, i can't flash roms.
The error on start: failed to initialize partition table.
No Bootable A/B Slot, and failed to boot Linux, falling back to the fastboot.
here is my bootloader informations:
(bootloader) version: 0.5
(bootloader) version-bootloader: MBM-2.1-river_retail-a5c9d71-190801
(bootloader) product: river
(bootloader) board: river
(bootloader) secure: yes
(bootloader) hwrev: PVT
(bootloader) radio: 4
(bootloader) storage-type: emmc
(bootloader) emmc: 64GB MICRON S0J9N8 RV=08 PV=10 FV=0000000000000004
(bootloader) ram: 4GB MICRON LP3 DIE=8Gb M5=FF M6=01 M7=00 M8=5F
(bootloader) cpu: SDM632
(bootloader) cid: 0xDEAD
(bootloader) channelid: 0x00
(bootloader) uid: 0000000000000000000000000000
(bootloader) securestate: oem_locked
(bootloader) iswarrantyvoid: n/a
(bootloader) max-download-size: 536870912
(bootloader) reason: Failed to initialize partition table
(bootloader) imei:
(bootloader) meid:
(bootloader) date:
(bootloader) sku:
(bootloader) carrier_sku:
(bootloader) battid:
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time:
(bootloader) ro.build.fingerprint:
(bootloader) poweroffalarm: 0
(bootloader) ro.build.version.full:
(bootloader) ro.build.version.qcom:
(bootloader) version-baseband:
(bootloader) kernel.version:
(bootloader) sbl1.git: sbl1.git
(bootloader) rpm.git: rpm.git
(bootloader) tz.git: tz.git
(bootloader) devcfg.git: devcfg.git
(bootloader) keymaster.git: keymaster.git
(bootloader) cmnlib.git: cmnlib.git
(bootloader) cmnlib64.git: cmnlib64.git
(bootloader) prov.git: prov.git
(bootloader) aboot.git: MBM-2.1-river_retail-a5c9d71-190801
(bootloader) frp-state: no protection (err)
(bootloader) ro.carrier:
(bootloader) current-slot:
(bootloader) running-boot-lun: must + g->mlen
(bootloader) running-slot:
(bootloader) slot-suffixes: _a
(bootloader) slot-count: 1
(bootloader) slot-successful:_a: INVALID
(bootloader) slot-successful:_b: INVALID
(bootloader) slot-bootable:_a: INVALID
(bootloader) slot-bootable:_b: INVALID
(bootloader) slot-retry-count:_a: unknown
(bootloader) slot-retry-count:_b: unknown
i can't flash nothing, Its giving me, ex:
Setting current slot to 'a'...
(bootloader) Command is not allowed
FAILED (remote failure)
finished. total time: 0.037s
Remote Failure.
Can someone help me? please angelllllllllllllss

Try to flash the stock firmware. It must be signed and the same version as already installed.
Even if the bootloader is locked you can flash it.

WoKoschekk said:
Try to flash the stock firmware. It must be signed and the same version as already installed.
Even if the bootloader is locked you can flash it.
Click to expand...
Click to collapse
and the fastboot details? its like, corrupted?

WoKoschekk said:
Try to flash the stock firmware. It must be signed and the same version as already installed.
Even if the bootloader is locked you can flash it.
Click to expand...
Click to collapse
Dont Work, Remove Error

Are you able to boot into TWRP via "fastboot boot twrp.img" ? Is there any fastboot command executable on your device?
Can you enter the stock recovery?

WoKoschekk said:
Are you able to boot into TWRP via "fastboot boot twrp.img" ? Is there any fastboot command executable on your device?
Can you enter the stock recovery?
Click to expand...
Click to collapse
Nope, i cant go to the Stock Recovery, and the fastboot boot twrp.img dont work.

if you can't run the following commands then maybe you will need a blankflash...
Just use the gpt.bin and bootloader.img files from your stock rom:
Code:
fastboot flash partition gpt.bin
fastboot flash bootloader bootloader.img
fastboot reboot-bootloader

Or try RSDlite or any Motorola repair software...

WoKoschekk said:
if you can't run the following commands then maybe you will need a blankflash...
Just use the gpt.bin and bootloader.img files from your stock rom:
Code:
fastboot flash partition gpt.bin
fastboot flash bootloader bootloader.img
fastboot reboot-bootloader
Click to expand...
Click to collapse
Gpt and bootloader don't installs, the remote error its back.

WoKoschekk said:
Or try RSDlite or any Motorola repair software...
Click to expand...
Click to collapse
i tried, the RSD, and not recognize the phone.

So, you can't do anything... I guess the only chance to fix your phone is a blank flash.
I'm sorry but I don't know how to do that.
It would be better for you to use the search function.
Good luck!!

GordinhoBr said:
Hi Guys, i have a moto g7 1962-4.
After flashed the lineage os rom, and installed wrong modules, i decided to install the Havoc Os, after that, my cellphone's restarted on the fastboot(secure) screen.
The oem_turns to lock, says oem_lock
and, i can't flash roms.
The error on start: failed to initialize partition table.
No Bootable A/B Slot, and failed to boot Linux, falling back to the fastboot.
here is my bootloader informations:
(bootloader) version: 0.5
(bootloader) version-bootloader: MBM-2.1-river_retail-a5c9d71-190801
(bootloader) product: river
(bootloader) board: river
(bootloader) secure: yes
(bootloader) hwrev: PVT
(bootloader) radio: 4
(bootloader) storage-type: emmc
(bootloader) emmc: 64GB MICRON S0J9N8 RV=08 PV=10 FV=0000000000000004
(bootloader) ram: 4GB MICRON LP3 DIE=8Gb M5=FF M6=01 M7=00 M8=5F
(bootloader) cpu: SDM632
(bootloader) cid: 0xDEAD
(bootloader) channelid: 0x00
(bootloader) uid: 0000000000000000000000000000
(bootloader) securestate: oem_locked
(bootloader) iswarrantyvoid: n/a
(bootloader) max-download-size: 536870912
(bootloader) reason: Failed to initialize partition table
(bootloader) imei:
(bootloader) meid:
(bootloader) date:
(bootloader) sku:
(bootloader) carrier_sku:
(bootloader) battid:
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time:
(bootloader) ro.build.fingerprint:
(bootloader) poweroffalarm: 0
(bootloader) ro.build.version.full:
(bootloader) ro.build.version.qcom:
(bootloader) version-baseband:
(bootloader) kernel.version:
(bootloader) sbl1.git: sbl1.git
(bootloader) rpm.git: rpm.git
(bootloader) tz.git: tz.git
(bootloader) devcfg.git: devcfg.git
(bootloader) keymaster.git: keymaster.git
(bootloader) cmnlib.git: cmnlib.git
(bootloader) cmnlib64.git: cmnlib64.git
(bootloader) prov.git: prov.git
(bootloader) aboot.git: MBM-2.1-river_retail-a5c9d71-190801
(bootloader) frp-state: no protection (err)
(bootloader) ro.carrier:
(bootloader) current-slot:
(bootloader) running-boot-lun: must + g->mlen
(bootloader) running-slot:
(bootloader) slot-suffixes: _a
(bootloader) slot-count: 1
(bootloader) slot-successful:_a: INVALID
(bootloader) slot-successful:_b: INVALID
(bootloader) slot-bootable:_a: INVALID
(bootloader) slot-bootable:_b: INVALID
(bootloader) slot-retry-count:_a: unknown
(bootloader) slot-retry-count:_b: unknown
i can't flash nothing, Its giving me, ex:
Setting current slot to 'a'...
(bootloader) Command is not allowed
FAILED (remote failure)
finished. total time: 0.037s
Remote Failure.
Can someone help me? please angelllllllllllllss
Click to expand...
Click to collapse
Got the same here brow. I've tried everything without success. I took the cell phone in the authorized service and they charged me incredible 840 reais to fix (the phone already costs 899 new in the store). In the G7 plus forum there is a topic talking about Blank Flash. I tried to do it but I need the singleimage.bin file for the G7 model, since there the file is for G7 plus and it doesn't fit. I didn't find this file anywhere on the internet so I tried to build mine. apparently needs to extract the booloader.img file and create from the extracted files the singleimage.bin file with a program called star. For now, assists cannot recover. I already put mue G7 in the drawer and bought an a50, because I believe that in a few months this blank flash file will appear on the internet and solve our case. anyway, good luck! and any news please let me know here! I will do the same.

diegovmsouza said:
Got the same here brow. I've tried everything without success. I took the cell phone in the authorized service and they charged me incredible 840 reais to fix (the phone already costs 899 new in the store). In the G7 plus forum there is a topic talking about Blank Flash. I tried to do it but I need the singleimage.bin file for the G7 model, since there the file is for G7 plus and it doesn't fit. I didn't find this file anywhere on the internet so I tried to build mine. apparently needs to extract the booloader.img file and create from the extracted files the singleimage.bin file with a program called star. For now, assists cannot recover. I already put mue G7 in the drawer and bought an a50, because I believe that in a few months this blank flash file will appear on the internet and solve our case. anyway, good luck! and any news please let me know here! I will do the same.
Click to expand...
Click to collapse
send me you phone number.

Do you have access to Fastboot mode, right?

River blankflash is available on Tel$gram

HueyT said:
River blankflash is available on Tel$gram
Click to expand...
Click to collapse
On what now?

iamcubeman said:
On what now?
Click to expand...
Click to collapse
Telegram

[HELP] Unlocking the booloader of Amazon Echo Show 2nd Gen

Hello,
I want to know if someone can help me unlocking the bootloader of this device for installing custom rom/apps
It has an Intel Cherry Trail Processor
I can boot to fastboot using the Vol- and Power together and tried the following commands
fastboot oem unlock - returns OKAY but doesn't unlock the bootloader
Code:
fastboot oem lock
- returns that the device is already in the required state
Code:
fastboot flash twrp.img
- returns that it cannot be possible since the device is locked
Code:
fastboot boot twrp.img
- goes to the amazon logo and then right to fastboot again
Code:
fastboot getvar all
(bootloader) serialno: ------------------------ [hidden for purposes]
(bootloader) board: Intel Corp. Cherry Trail CR 0
(bootloader) device-state: locked
(bootloader) boot-state: GREEN
(bootloader) firmware: Intel Corporation CH2T.BSHP.X64.0005.R09.18091217
(bootloader) product-name: CHERRYVIEW D1 PLATFORM
(bootloader) secureboot: yes
(bootloader) off-mode-charge: 1
(bootloader) unlocked: no
(bootloader) secure: yes
(bootloader) partition-type:vendor: ext4
(bootloader) partition-size:vendor: 0x0000000016C00000
(bootloader) partition-type:userdata: ext4
(bootloader) partition-size:userdata: 0x00000000FA800000
(bootloader) partition-type:data: ext4
(bootloader) partition-size:data: 0x00000000FA800000
(bootloader) partition-type:system: ext4
(bootloader) partition-size:system: 0x000000008CC00000
(bootloader) partition-type:cache: ext4
(bootloader) partition-size:cache: 0x0000000020000000
(bootloader) partition-type:factory: none
(bootloader) partition-size:factory: 0x0000000002000000
(bootloader) partition-type:recovery: none
(bootloader) partition-size:recovery: 0x0000000002000000
(bootloader) partition-type:boot: none
(bootloader) partition-size:boot: 0x0000000002000000
(bootloader) partition-type:metadata: none
(bootloader) partition-size:metadata: 0x0000000001000000
(bootloader) partition-type:config: ext4
(bootloader) partition-size:config: 0x0000000000800000
(bootloader) partition-type:misc: none
(bootloader) partition-size:misc: 0x0000000000100000
(bootloader) partition-type:persistent: ext4
(bootloader) partition-size:persistent: 0x0000000000100000
(bootloader) partition-type:bootloader2: none
(bootloader) partition-size:bootloader2: 0x0000000004000000
(bootloader) partition-type:bootloader: vfat
(bootloader) partition-size:bootloader: 0x0000000004000000
(bootloader) max-download-size: 0x0000000010000000
(bootloader) battery-voltage:
(bootloader) version-bootloader: kernelflinger-02.19
(bootloader) device-type: PROD
(bootloader) product: bishop
all:
Finished. Total time: 1.098s
I can also boot into DNX FASTBOOT MODE using all 3 buttons, but I can't do anything in that mode, but the device is recognized using fastboot devices
Does anyone know how to use dnx fastboot mode? Or what is it?
Thank you

Wrong command
Hey! You should be using fastboot OEM unlock, not fastboot OEM lock. Also the unit doesn't have a way to enable adb from what I can tell.

Note: I have NO experience hacking amazon echo
Could you use the same method we use to hack the fire HD8 or HD10 with the brick.sh, then flash the bootrom, then enter a hacked fastboot? From what it looks like, recovery mode on the show looks like the same one used on the HD10.

Echo Show need to unlock
Hello
I tried with the following commands.
I tried with "fastboot oem unlock", but command is not working.
I want to unlock my amazon echo show devices. Or is there any way to open echo show without login with amazon account.
Please help me to solve the issue.
arcanandrei said:
Hello,
I want to know if someone can help me unlocking the bootloader of this device for installing custom rom/apps
It has an Intel Cherry Trail Processor
I can boot to fastboot using the Vol- and Power together and tried the following commands
fastboot oem unlock - returns OKAY but doesn't unlock the bootloader
Code:
fastboot oem lock
- returns that the device is already in the required state
Code:
fastboot flash twrp.img
- returns that it cannot be possible since the device is locked
Code:
fastboot boot twrp.img
- goes to the amazon logo and then right to fastboot again
Code:
fastboot getvar all
(bootloader) serialno: ------------------------ [hidden for purposes]
(bootloader) board: Intel Corp. Cherry Trail CR 0
(bootloader) device-state: locked
(bootloader) boot-state: GREEN
(bootloader) firmware: Intel Corporation CH2T.BSHP.X64.0005.R09.18091217
(bootloader) product-name: CHERRYVIEW D1 PLATFORM
(bootloader) secureboot: yes
(bootloader) off-mode-charge: 1
(bootloader) unlocked: no
(bootloader) secure: yes
(bootloader) partition-type:vendor: ext4
(bootloader) partition-size:vendor: 0x0000000016C00000
(bootloader) partition-type:userdata: ext4
(bootloader) partition-size:userdata: 0x00000000FA800000
(bootloader) partition-type:data: ext4
(bootloader) partition-size:data: 0x00000000FA800000
(bootloader) partition-type:system: ext4
(bootloader) partition-size:system: 0x000000008CC00000
(bootloader) partition-type:cache: ext4
(bootloader) partition-size:cache: 0x0000000020000000
(bootloader) partition-type:factory: none
(bootloader) partition-size:factory: 0x0000000002000000
(bootloader) partition-type:recovery: none
(bootloader) partition-size:recovery: 0x0000000002000000
(bootloader) partition-type:boot: none
(bootloader) partition-size:boot: 0x0000000002000000
(bootloader) partition-type:metadata: none
(bootloader) partition-size:metadata: 0x0000000001000000
(bootloader) partition-type:config: ext4
(bootloader) partition-size:config: 0x0000000000800000
(bootloader) partition-type:misc: none
(bootloader) partition-size:misc: 0x0000000000100000
(bootloader) partition-type:persistent: ext4
(bootloader) partition-size:persistent: 0x0000000000100000
(bootloader) partition-type:bootloader2: none
(bootloader) partition-size:bootloader2: 0x0000000004000000
(bootloader) partition-type:bootloader: vfat
(bootloader) partition-size:bootloader: 0x0000000004000000
(bootloader) max-download-size: 0x0000000010000000
(bootloader) battery-voltage:
(bootloader) version-bootloader: kernelflinger-02.19
(bootloader) device-type: PROD
(bootloader) product: bishop
all:
Finished. Total time: 1.098s
I can also boot into DNX FASTBOOT MODE using all 3 buttons, but I can't do anything in that mode, but the device is recognized using fastboot devices
Does anyone know how to use dnx fastboot mode? Or what is it?
Thank you
Click to expand...
Click to collapse

All Amazon echo show devices required unlock code which is generated from the serial number to unlock the devices.
Unfortunately this unlock code can be only retrieved inside amazon corp network through their internal tool for developing purpose.

Hello! I bought a second hand show 5 and the former owner has the account locked out. I can not do anything. When I go into configuration it tells me that it does not recognize the account in amazon.
I have thought that if I can change the serial number of the device, I could finish the configuration correctly.
Code:
fastboot getvar all
(bootloader) antirback_tee_version: 0x0103
(bootloader) antirback_lk_version: 0x0001
(bootloader) antirback_pl_version: 0x0001
(bootloader) rpmb_state: 1
(bootloader) lk_build_desc: cd178e6-20190703_190118
(bootloader) pl_build_desc: d14f08f-20190512_232119
(bootloader) secure: yes
(bootloader) prod: 1
(bootloader) otu_code: +QdtQ0mzlUklt9mtCmRNAYIKNnfW6akA
(bootloader) unlock_status: false
(bootloader) unlock_code: 0x???????????????????? [hidden for purposes]
(bootloader) serialno: ???????????????? [hidden for purposes]
(bootloader) max-download-size: 0x6d00000
(bootloader) off-mode-charge: 1
(bootloader) warranty: no
(bootloader) kernel: lk
(bootloader) product: CHECKERS
(bootloader) version-preloader: 0.1.00
(bootloader) version: 0.5
all: Done!!
Finished. Total time: 0.018s
I have tried this:
Code:
sudo fastboot oem unlock 0xMy_onlock_code
FAILED (remote: 'the command you input is restricted on locked hw')
fastboot: error: Command failed
I cannot access adb.
Any ideas to root or start adb from fastboot?
Any ideas to unlink the old user's account?
I already did a factory reset. Sorry for my english.

Hello , have any sucess?

halfblood* said:
Hello , have any sucess?
Click to expand...
Click to collapse
I got the bootloader unlock code just now using power and both volume buttons to boot fstboot then plugged my phone into micro USB on back running bugajager app

I have had some success using Bugjaeger on my android phone while attached to a couple of uncooperative devices, namely my Tesla style head unit, as well a "Class VR" headset I picked up on eBay . The headset was locked down fairly well, but it was no match for Bugjaeger. I ended up able to load my own launcher, and now it acts like any other rooted android. There may be other tools that can help, I am just sharing my experience with one app. Hope this helps. R*

memorixo said:
Hello! I bought a second hand show 5 and the former owner has the account locked out. I can not do anything. When I go into configuration it tells me that it does not recognize the account in amazon.
I have thought that if I can change the serial number of the device, I could finish the configuration correctly.
Code:
fastboot getvar all
(bootloader) antirback_tee_version: 0x0103
(bootloader) antirback_lk_version: 0x0001
(bootloader) antirback_pl_version: 0x0001
(bootloader) rpmb_state: 1
(bootloader) lk_build_desc: cd178e6-20190703_190118
(bootloader) pl_build_desc: d14f08f-20190512_232119
(bootloader) secure: yes
(bootloader) prod: 1
(bootloader) otu_code: +QdtQ0mzlUklt9mtCmRNAYIKNnfW6akA
(bootloader) unlock_status: false
(bootloader) unlock_code: 0x???????????????????? [hidden for purposes]
(bootloader) serialno: ???????????????? [hidden for purposes]
(bootloader) max-download-size: 0x6d00000
(bootloader) off-mode-charge: 1
(bootloader) warranty: no
(bootloader) kernel: lk
(bootloader) product: CHECKERS
(bootloader) version-preloader: 0.1.00
(bootloader) version: 0.5
all: Done!!
Finished. Total time: 0.018s
I have tried this:
Code:
sudo fastboot oem unlock 0xMy_onlock_code
FAILED (remote: 'the command you input is restricted on locked hw')
fastboot: error: Command failed
I cannot access adb.
Any ideas to root or start adb from fastboot?
Any ideas to unlink the old user's account?
I already did a factory reset. Sorry for my english.
Click to expand...
Click to collapse
Hi! Have you managed to do anything with it? I have a locked echo show 8, which I'm trying hard on finding a way to unlock it... Would very much appreciate any help on this matter, thanks!

stuck in fastboot

So I cross flashed (LGUP Partition DL) F800 Pie to a US996 and it was working fine except I no longer had cell service. So I flashed(QFIL to get a good download mode, then LGUP Partition DL) back to US99620f and now I'm stuck in fastboot mode. I have a feeling that the F800 flash redid the partitions and the US996 is not happy. I've build a QFIL flat package build and I still get the same results. If I flash F800 back on it will boot just fine, but I have to use QFIL to regain download mode and I don't have root or TWRP to try other methods.
I can access Download and Recovery modes too.
Code:
(bootloader) version:0.5
(bootloader) variant:MTP eMMC
(bootloader) secure:yes
(bootloader) version-baseband:
(bootloader) version-bootloader:
(bootloader) display-panel:
(bootloader) off-mode-charge:0
(bootloader) charger-screen-enabled:0
(bootloader) max-download-size: 0x20000000
(bootloader) partition-type:cache:ext4
(bootloader) partition-size:cache: 0x4d000000
(bootloader) partition-type:userdata:ext4
(bootloader) partition-size:userdata: 0xced000000
(bootloader) partition-type:system:ext4
(bootloader) partition-size:system: 0x180000000
(bootloader) serialno:LGUS99680d946a4
(bootloader) kernel:lk
(bootloader) product:MSM8996
(bootloader) unlocked:no
Things I can do:
Recovery,Stock - yes
Download Mode - Yes
9008 Mode - yes
Wiped User/Cache "factory reset" - Yes
Boot into F800 Pie - yes