Database Develop

[GUIDE] Downgrade Zenfone 2 Laser to any official firmware

I have discovered multiple ways of downgrading ZenFone 2 Laser out of which two methods proved out to be easy and reliable. Both methods have been tested and are working.
Method 2 doesn't require root while method 1 needs root access.
Pre-requisite: Stock firmware zip file. You can find download links from index thread for all variants.
WHILE THIS GUIDE HAS VERY LESS CHANCES OF MESSING UP YOUR DEVICE, HUMAN ERROR CAN ANYWAY HARM THE DEVICE. I AM NOT RESPONSIBLE FOR ANYTHING YOU DO TO ANY DEVICE. YOU ARE DOING THIS AT YOUR OWN RISK
METHOD 1: Requires ROOT-
Short instruction:
Some users say you can downgrade by renaming the OTA zip to correspond to a higher version but that will NEVER work because the update script has this line
(!less_than_int(1457089250, getprop("ro.build.date.utc"))) || abort("Can't install this package (Fri Mar 4 19:00:50 CST 2016) over newer build (" + getprop("ro.build.date") + ").");
Click to expand...
Click to collapse
The recovery reads ro.buid.date.utc value from buid.prop. If the value is less than the value in updater-script (like the value highligted in above quote) any recovery will not flash it, neither stock nor custom. Just increaase the value of ro.build.date.utc (in build.prop) to any value higher than the value in updater-script and then flash the zip via recovery.
Detailed Instructions:
1. Open updater-script from the firmware zip. It will be found in /META-INF/com/google/android inside the .zip
2. look at the first line (!less_than_int(1457089250, getprop("ro.bui....
3. The value 1457089250 is taken as an example, your updater-script may have a different value. Keep a note of this value.
4. Install any root file manager like ES file explorer (if you dont have already)
5. Goto /system (the system folder) using the root file manager. Grant root access if prompted
6. Open buid.prop file as text and look for the line "ro.build.date.utc=1446585430"
1446585430 is taken as example, your phone will have a different value.
7. Now increase this value in build.prop to any number greater than the value you noted from updater-script
for example, if my updater-script has 1457089250 this value and buil.prop has 1446585430 this value, I will simply change the value in build.prop to 1546585430 or 1448585430 or 1457089251. Any number greater than 1457089250 will work in my case.
8. Now reboot to recovery (vol down + power)
9. Select "apply update from external sd card" select your firmware zip file, and then select yes to flash. It will take 5-10 min
10. (optional but recommended) Wipe factory/data . If you don't do this, you will see the annoying "Android is upgrading.." screen which takes around 30-40 mins to reach home screen.
Method 2: Without root, requires computer
Short instructions:
As I mentioned earlier, recovery reads "ro.build.date.utc" But you can bypass this check by erasing system partition.
Just do
Code:
fastboot erase system
from fastboot mode and then flash the zip from recovery
Detailed Instructions:
1. Install Asus drivers to your computer. (link in index thread)
2. Download adb_fastboot.zip and extract its contents
3. Reboot your phone to 'bootloader mode'. To do this turn of your phone completely. Hold "volume down Up" button and then press and hold power button. Release power button after Asus logo appears and then release volume down button. Your phone is now in bootloader mode.
4. Connect your phone to pc via a reliable usb cable. Look at your phone screen. It should display "Fastboot mode!"
5. Now go to the folder where you have extracted all the files. Holding down shift key, Right click on any point on white screen. Then click on 'open command window here' from the menu that appears. Command Prompt will open now
6. On command prompt type
Code:
fastboot devices
and hit enter
and check if it is detecting your device.
7. Then type
Code:
fastboot erase system
(this will erase your current OS, you are warned!)
8. After it is done type
Code:
fastboot oem reboot-recovery
to boot into recovery mode
9. Select "apply update from external sd card" select your firmware zip file, and then select yes to flash. It will take 5-10 min
10. (optional but recommended) Wipe factory/data . If you don't do this, you will see the annoying "Android is upgrading.." screen which takes around 30-40 mins to reach home screen.

Successfully downgraded to 1.16.40.763 from 1.17.40.1234 without root
Thanks!

sziraqui said:
I have discovered multiple ways of downgrading ZenFone 2 Laser out of which two methods proved out to be easy and reliable. Both methods have been tested and are working.
Method 2 doesn't require root while method 1 needs root access.
Pre-requisite: Stock firmware zip file. You can find download links from index thread for all variants.
WHILE THIS GUIDE HAS VERY LESS CHANCES OF MESSING UP YOUR DEVICE, HUMAN ERROR CAN ANYWAY HARM THE DEVICE. I AM NOT RESPONSIBLE FOR ANYTHING YOU DO TO ANY DEVICE. YOU ARE DOING THIS AT YOUR OWN RISK
METHOD 1: Requires ROOT-
Short instruction:
Some users say you can downgrade by renaming the OTA zip to correspond to a higher version but that will NEVER work because the update script has this line
The recovery reads ro.buid.date.utc value from buid.prop. If the value is less than the value in updater-script (like the value highligted in above quote) any recovery will not flash it, neither stock nor custom. Just increaase the value of ro.build.date.utc (in build.prop) to any value higher than the value in updater-script and then flash the zip via recovery.
Detailed Instructions:
1. Open updater-script from the firmware zip. It will be found in /META-INF/com/google/android inside the .zip
2. look at the first line (!less_than_int(1457089250, getprop("ro.bui....
3. The value 1457089250 is taken as an example, your updater-script may have a different value. Keep a note of this value.
4. Install any root file manager like ES file explorer (if you dont have already)
5. Goto /system (the system folder) using the root file manager. Grant root access if prompted
6. Open buid.prop file as text and look for the line "ro.build.date.utc=1446585430"
1446585430 is taken as example, your phone will have a different value.
7. Now increase this value in build.prop to any number greater than the value you noted from updater-script
for example, if my updater-script has 1457089250 this value and buil.prop has 1446585430 this value, I will simply change the value in build.prop to 1546585430 or 1448585430 or 1457089251. Any number greater than 1457089250 will work in my case.
8. Now reboot to recovery (vol down + power)
9. Select "apply update from external sd card" select your firmware zip file, and then select yes to flash. It will take 5-10 min
10. (optional but recommended) Wipe factory/data . If you don't do this, you will see the annoying "Android is upgrading.." screen which takes around 30-40 mins to reach home screen.
Method 2: Without root, requires computer
Short instructions:
As I mentioned earlier, recovery reads "ro.build.date.utc" But you can bypass this check by erasing system partition.
Just do
Code:
fastboot erase system
from fastboot mode and then flash the zip from recovery
Detailed Instructions:
1. Install Asus drivers to your computer. (link in index thread)
2. Download adb_fastboot.zip and extract its contents
3. Reboot your phone to 'bootloader mode'. To do this turn of your phone completely. Hold volume down button and then press and hold power button. Release power button after Asus logo appears and then release volume down button. Your phone is now in bootloader mode.
4. Connect your phone to pc via a reliable usb cable. Look at your phone screen. It should display "Fastboot mode!"
5. Now go to the folder where you have extracted all the files. Holding down shift key, Right click on any point on white screen. Then click on 'open command window here' from the menu that appears. Command Prompt will open now
6. On command prompt type
Code:
fastboot devices
and hit enter
and check if it is detecting your device.
7. Then type
Code:
fastboot erase system
(this will erase your current OS, you are warned!)
8. After it is done type
Code:
fastboot oem reboot-recovery
to boot into recovery mode
9. Select "apply update from external sd card" select your firmware zip file, and then select yes to flash. It will take 5-10 min
10. (optional but recommended) Wipe factory/data . If you don't do this, you will see the annoying "Android is upgrading.." screen which takes around 30-40 mins to reach home screen.
Click to expand...
Click to collapse
Currently iam on marshmallow. My phone is zenfone laser 550kl. Iam having some problems with the marshmallow recovery because of that when doing apply update from sd card it is resulting an error.
Failed to mount/asdf.
So i like to flash the lolipop recovery while iam on the marshmallow and then do apply update from sd card. I like to go back to the 1.13 lolipop firmware
Is it possible to to flash the lolipop recovery while iam on marshmallow. If possible. Help me how to do that

ThanveerAliSayed said:
Currently iam on marshmallow. My phone is zenfone laser 550kl. Iam having some problems with the marshmallow recovery because of that when doing apply update from sd card it is resulting an error.
Failed to mount/asdf.
So i like to flash the lolipop recovery while iam on the marshmallow and then do apply update from sd card. I like to go back to the 1.13 lolipop firmware
Is it possible to to flash the lolipop recovery while iam on marshmallow. If possible. Help me how to do that
Click to expand...
Click to collapse
"Failed to mount /asdf" error is harmless you will get that error even on latest twrp. You can ignore the error and use the MM stock recovery like normal. Recovery will do its job it can format, install updates, clear cache and everything, you just need to ignore that /asdf error
But you can use any stock recovery from any firmware version lower than or equal to your current firmware version. Drawbacks: You cannot apply update to MM OTAs if your recovery version doesn't match the current firmware version.
Going back to stock 1.13 is a bad idea. I would recommend you to stay on MM since it has many performance improvements.
But still if you want to go back to lollipop, consider downgrading to the last lollipop update i.e. v1.17.40.1531
Xda Tips: 1. Never quote the entire OP (the main post here, called original post)
2. Don't say thanks, instead hit the :good: button
3. Use "Post Reply" option on top if you want to reply to a post. Use @username to gain attention of a user

sziraqui said:
"Failed to mount /asdf" error is harmless you will get that error even on latest twrp. You can ignore the error and use the MM stock recovery like normal. Recovery will do its job it can format, install updates, clear cache and everything, you just need to ignore that /asdf error
But you can use any stock recovery from any firmware version lower than or equal to your current firmware version. Drawbacks: You cannot apply update to MM OTAs if your recovery version doesn't match the current firmware version.
Going back to stock 1.13 is a bad idea. I would recommend you to stay on MM since it has many performance improvements.
But still if you want to go back to lollipop, consider downgrading to the last lollipop update i.e. v1.17.40.1531
Xda Tips: 1. Never quote the entire OP (the main post here, called original post)
2. Don't say thanks, instead hit the :good: button
3. Use "Post Reply" option on top if you want to reply to a post. Use @username to gain attention of a user
Click to expand...
Click to collapse
I got a 412 mb ota update some days before. I downloaded it. Apply it for proceed. Then it start checking system as usual phone restarted. But update did not happened. Instead this same error show up. Then i can only reboot system. Got an update failed message.since that when i check for updates iam not even getting any. May be it will be solved by a factory reset .but even if i get an ota. The update wont proceed .because the recovery wont allow me to do that
And also that wipe cache partition also results the same error .so without solving this error i cant update to the latest MM too :/ .

In my experience, the most reliable method is to
extract the recovery from the version of stock ROM you want to upgrade or downgrade to
Flash that recovery with fastboot
Wipe /system in fastboot
Reboot to recovery and update with the stock ROM .zip
Or
Even easier, use Sziraqui's fastboot ready .IMG files and just flash them via fastboot.:good:

where can i find the recovery file in Stock rom
4llerbuntu said:
In my experience, the most reliable method is to
extract the recovery from the version of stock ROM you want to upgrade or downgrade to
Thanks for the Information, Can you please help to find the recovery file in Stock rom.
Click to expand...
Click to collapse

The recovery is included in the stock ROM zip file. Extract the zip and you will find it inside.
Presumably if you want to flash the stock ROM you have already downloaded it?

4llerbuntu said:
The recovery is included in the stock ROM zip file. Extract the zip and you will find it inside.
Presumably if you want to flash the stock ROM you have already downloaded it?
Click to expand...
Click to collapse
Hi, I see only boot.img in the zip file. Is there a hidden recovery?

4llerbuntu said:
The recovery is included in the stock ROM zip file. Extract the zip and you will find it inside.
Presumably if you want to flash the stock ROM you have already downloaded it?
Click to expand...
Click to collapse
I see only boot.img file , i didn't find any recovery.img file, in case if you have already done this probably yes then please share us the steps to get recovery from Stock rom.

4llerbuntu said:
In my experience, the most reliable method is to
extract the recovery from the version of stock ROM you want to upgrade or downgrade to
Flash that recovery with fastboot
Wipe /system in fastboot
Reboot to recovery and update with the stock ROM .zip
Or
Even easier, use Sziraqui's fastboot ready .IMG files and just flash them via fastboot.:good:
Click to expand...
Click to collapse
I cant find any recovery.img in the firmware zip. :/
Can you detaily explain that fastboot method as it is for flashing the lolipop recovery for downgrading to 1.13.
Iam a beginner in android. This is my first android phone.

murat124 said:
Hi, I see only boot.img in the zip file. Is there a hidden recovery?
Click to expand...
Click to collapse
I found out that recovery for each firmware is available here. You should use a desktop browser to use this website.
https://mega.nz/#F!lodnzDhK!H5ChxausDTyko1qGlnF7dw!Fg9FwLoa

ThanveerAliSayed said:
I found out that recovery for each firmware is available here. You should use a desktop browser to use this website.
https://mega.nz/#F!lodnzDhK!H5ChxausDTyko1qGlnF7dw!Fg9FwLoa
Click to expand...
Click to collapse
Thank you.
Can ZE551KL use the recovery.img from ZE550KL? My ZE551KL has the extra 1700(AWS) band.

Please where are you guys downloading your stock rom from?
The stock zip is NOT flash-able like a custom ROM .zip. That's not how it works. If the Roms you have are custom recovery flash-able, they are not the OEM rom, they have been modified.
All the Roms I have come with a recovery.img file...
Then again if I have to explain how to use fast boot to flash the recovery, there is a good chance you shouldn't be messing around with fast boot.......
---------- Post added at 10:03 PM ---------- Previous post was at 10:02 PM ----------
murat124 said:
thank you.
Can ze551kl use the recovery.img from ze550kl? My ze551kl has the extra 1700(aws) band.
Click to expand...
Click to collapse
no it cannot. Do not try it

Weird ..... I can find recovery.img

Can anyone explain me detail. How to flash recovery only. My bootloader is not unlocked. Someone said that i need to unlock bootloader to flash the stock recovery

ThanveerAliSayed said:
Can anyone explain me detail. How to flash recovery only. My bootloader is not unlocked. Someone said that i need to unlock bootloader to flash the stock recovery
Click to expand...
Click to collapse
You don't need to unlock bootloader for flashing stock recovery that you downloaded from the above mega drive.
To flash the recovery.img (or any .img) You need to have Adb and fastboot files in your pc as well as Asus Zenfone drivers installed
All info and downloads for adb and fastboot can be found here
Search and download Asus ZenFone 2 laser drivers.
Once you have your pc setup with these tools,
With Administrator priveleges, locate the folder where adb.exe and fastboot.exe files are present. Hold down shift key and right click on that folder and select "open command window here". Then reboot your phone to fastboot mode [power off, hold vol up +power, release power when logo appears]
Connect your device to pc.
Type the following command on cmd
Code:
fastboot devices
Output should be something like this
Code:
FCAHSJSJJAKAK fastboot
This command will check if your device is connected or not
If output is blank, device is not being detected.
To flash recovery.img, copy the recovery.img file to the same folder where fastboot.exe exists and then type
Code:
fastboot flash recovery recovery.img
Output is easy to understand, if it says [OKAY] then flashing succeeded

Tried downgrading ze551kl by fastboot erase system then installing .zip from Asus website (via sdcard). All of the Asus updates except the earliest fail with 'fota return code 403'.
1.14.40.550 installs ok but then boots (gets as far as displaying the wallpaper), gives an error message in german (looks like 'android media process stopped') and goes into boot loop. Anyone seen this before?
Also, any way to build a recovery.img from the Asus update files?

invalid boot image whenever i flashed stock recovery,any one know why ?
What i do is flash the stock recovery and flash relock bootloader.

Leftrand said:
invalid boot image whenever i flashed stock recovery,any one know why ?
What i do is flash the stock recovery and flash relock bootloader.
Click to expand...
Click to collapse
I think OP needs a small correction to enter into FASTBOOT you need to press volume up and power instead of volume down and power buttons
---------- Post added at 05:45 PM ---------- Previous post was at 05:38 PM ----------

Bricked p10, need help.

So I have a p10, and decided to see what i could do with it. Having little experience, I managed to get somewhere. Unlocked the bootloader, got twrp, installed it with the command fastboot flash recovery recovery.img and got:
target reported max download size of 471859200 bytes
sending 'recovery' (32034 KB)...
OKAY [ 1.012s]
writing 'recovery'...
OKAY [ 0.200s]
finished. total time: 1.222s
WOOT! Awesome! No problems! Then I issued: fastboot boot recovery.img
And got
downloading 'boot.img'...
OKAY [ 1.020s]
booting...
FAILED (remote: Command not allowed)
finished. total time: 1.030s
WTF?!
So after a bit, I misread and flashed boot.img with: fastboot flash boot boot.img
I guess I flashed the wrong image. I dunno. But now it boots into the screen that tells me "Your device is unlocked and can'r be trusted" tells me its booting, reboots, goes to the same screen again, says its rebooting again, then brings me to Huawei eRecovery. I connect to my wifi network, telling it to download the latest version and recover, and it says "getting package info failed" So I ma stuck with a device that won't boot.
Oh yes, and down volume and power don't bring me to fastboot anymore.
Begging for help here please.

Do the whole rebranding to unbrick, not sure if you flashed wrong image on boot.
Advice: When flashing recovery boot it by powering off and using key combo. Or adb command. Not from fastboot as IMG.

I did a google search on rebranding to unbrick, and found a guide on the 9. So I assume its similar. It first tests me to boot into twrp. I can't. Twrp never got installed. The next step is to get the offical firmware and put it on the SD card. I can't find it. I am in Canada, and can't find any firmware for canada, nevermind anything north american. It is however possible I have found the wrong guide, as I don't really know what I am doing. As a complete noob, links to guides would be nice when possible and available when making recommendations.

The guide is the same for Mate 9/pro and P10/plus
Original: https://forum.xda-developers.com/mate-9/how-to/guide-mate-9-flash-update-package-t3593108
Explained as easy as posible:
Unlock bootloader (check again that boot loader is unlocked)
Download Update ZIP. I suggest rebrand to VTR-L29 C432 !
A. Get ROM update link through hwmt.ru. Click "filelist.xml". ---> http://hwmt.ru/hwmtsite/firmware-database/?firmware_model=VTR-L29&firmware_page=0
B. Observe "update.zip" size, choose more than 1GB file size FULL OTA . Example VTR-L29C432B164 filelist Link, all three update files and path are in the filelist.xml content.
update.zip: Change URL last "filelist.xml" to "update.zip" download file.
update_data_public.zip: Change URL last "filelist.xml" to "public/update_data_full_public.zip" download file, and rename it to "update_data_public.zip"
update_all_hw.zip: Change URL last "filelist.xml" to "hw/spcseas/update_full_hw_spcseas.zip" download file, and rename it to "update_all_hw.zip" Where spcseas is the model of the file you are downoloading.
Update Package (Download these at original post)
Base: HWOTA_2017050101_Base.zip
OS: Windows -> HWOTA_2017050101_Windows.zip
Model: P10 -> HWOTA_2017050201_VTR.zip [Thanks to @crucky verify]
Put HWOTA on pc desktop and on your external SD card (if you have one, otherwise update process will took a couple of minutes more)
Those 3 downloaded files goes on UPDATE dir, inside HWOTA
Run batch file "update.bat" for same model update or rebrand with/without sdcard.
Select rebrand chose what model is desired (Must be the same as the update package)
Always check the process continues (Sometimes it stucks on twrp or need reconnect to PC)
Once finished Factory default reset will start
Do the process twice! select "Same model update" on the second time.
After update successfully, device might be locked again.

smariob said:
The guide is the same for Mate 9/pro and P10/plus
Original: https://forum.xda-developers.com/mate-9/how-to/guide-mate-9-flash-update-package-t3593108
Explained as easy as posible:
Unlock bootloader (check again that boot loader is unlocked)
Download Update ZIP. I suggest rebrand to VTR-L29 C432 !
A. Get ROM update link through hwmt.ru. Click "filelist.xml". ---> http://hwmt.ru/hwmtsite/firmware-database/?firmware_model=VTR-L29&firmware_page=0
B. Observe "update.zip" size, choose more than 1GB file size FULL OTA . Example VTR-L29C432B164 filelist Link, all three update files and path are in the filelist.xml content.
update.zip: Change URL last "filelist.xml" to "update.zip" download file.
update_data_public.zip: Change URL last "filelist.xml" to "public/update_data_full_public.zip" download file, and rename it to "update_data_public.zip"
update_all_hw.zip: Change URL last "filelist.xml" to "hw/spcseas/update_full_hw_spcseas.zip" download file, and rename it to "update_all_hw.zip" Where spcseas is the model of the file you are downoloading.
Update Package (Download these at original post)
Base: HWOTA_2017050101_Base.zip
OS: Windows -> HWOTA_2017050101_Windows.zip
Model: P10 -> HWOTA_2017050201_VTR.zip [Thanks to @crucky verify]
Put HWOTA on pc desktop and on your external SD card (if you have one, otherwise update process will took a couple of minutes more)
Those 3 downloaded files goes on UPDATE dir, inside HWOTA
Run batch file "update.bat" for same model update or rebrand with/without sdcard.
Select rebrand chose what model is desired (Must be the same as the update package)
Always check the process continues (Sometimes it stucks on twrp or need reconnect to PC)
Once finished Factory default reset will start
Do the process twice! select "Same model update" on the second time.
After update successfully, device might be locked again.
Click to expand...
Click to collapse
okay, i know you are trying to be helpful, but I just can't follow it...
You said "Download Update ZIP. I suggest rebrand to VTR-L29 C432 !" Which one of them? Is the B just a build number, and I should get the latest? please remember, you are talking to a noob.
You talk about 3 files, update.zip, update_data_public.zip and update_all_hw.zip Do I need them all? If so the last one, where I change filelist.xml to all /cn/update_full_all_cn.zip doesn't work. See the following link http://update.hicloud.com:8180/TDS/.../v92067/f2/full/all/cn/update_full_all_cn.zip
Also, rename the file, "Where spcseas is the model of the file you are downoloading" Huh? I know I have to replace the word spcseas with something, but with that?
Now it says to run update.bat Whats the point? I have not been directed to plug the phone into the computer, and even if I did, the computer won't recognize it because I can't get it into any mode... Where do I put these files? They all go in the same directory? I just can't follow this guide as much as I try..
THERE IS GOOD NEWS HOWEVER!
I have been able to get it into TWRP! This means I can get into fastboot, which means I can re-flash the correct boot.img, IF I can get my hands on it (and assuming that's the actual issue It likely is. It was working until I flashed this other boot.img file.). So if I can get direction on how to get it, I should be okay. Double triple and quadruple bonus points for just providing me a direct link to the boot.img file to use without having to play around trying to follow guides I can't seem to understand.
UPDATE!!
Now although I can get into TWRP, its hit and miss, but I can get there eventually, it will no longer boot into fastboot/recovery. When I click reboot, and choose bootloader in TWRP, it just freezes..
This is getting frustrating. Apparently getting into the bootloader is hit and miss, but i can do it.

Search for Huawei update extractor in order to get BOOT.IMG from update.app (inside update zip) I could upload one myself, but I'm not at home right now.
TWRP doesn't support reboot atm. You must power off completly. To boot to recovery press power on and vol + until huawei logo appears, then relase power. It should boot to recovery TWRP in this case.
For boot bootloader you press vol - when you are connecting usb cable to PC.

smariob said:
The guide is the same for Mate 9/pro and P10/plus
Original: https://forum.xda-developers.com/mate-9/how-to/guide-mate-9-flash-update-package-t3593108
Explained as easy as posible:
Unlock bootloader (check again that boot loader is unlocked)
Download Update ZIP. I suggest rebrand to VTR-L29 C432 !
A. Get ROM update link through hwmt.ru. Click "filelist.xml". ---> http://hwmt.ru/hwmtsite/firmware-database/?firmware_model=VTR-L29&firmware_page=0
B. Observe "update.zip" size, choose more than 1GB file size FULL OTA . Example VTR-L29C432B164 filelist Link, all three update files and path are in the filelist.xml content.
update.zip: Change URL last "filelist.xml" to "update.zip" download file.
update_data_public.zip: Change URL last "filelist.xml" to "public/update_data_full_public.zip" download file, and rename it to "update_data_public.zip"
update_all_hw.zip: Change URL last "filelist.xml" to "hw/spcseas/update_full_hw_spcseas.zip" download file, and rename it to "update_all_hw.zip" Where spcseas is the model of the file you are downoloading.
Update Package (Download these at original post)
Base: HWOTA_2017050101_Base.zip
OS: Windows -> HWOTA_2017050101_Windows.zip
Model: P10 -> HWOTA_2017050201_VTR.zip [Thanks to @crucky verify]
Put HWOTA on pc desktop and on your external SD card (if you have one, otherwise update process will took a couple of minutes more)
Those 3 downloaded files goes on UPDATE dir, inside HWOTA
Run batch file "update.bat" for same model update or rebrand with/without sdcard.
Select rebrand chose what model is desired (Must be the same as the update package)
Always check the process continues (Sometimes it stucks on twrp or need reconnect to PC)
Once finished Factory default reset will start
Do the process twice! select "Same model update" on the second time.
After update successfully, device might be locked again.
Click to expand...
Click to collapse
smariob said:
Search for Huawei update extractor in order to get BOOT.IMG from update.app (inside update zip) I could upload one myself, but I'm not at home right now.
TWRP doesn't support reboot atm. You must power off completly. To boot to recovery press power on and vol + until huawei logo appears, then relase power. It should boot to recovery TWRP in this case.
For boot bootloader you press vol - when you are connecting usb cable to PC.
Click to expand...
Click to collapse
Thats good to know. I was getting TWRP more often when I did it from off. What was happening was I would holds power and volume up, release power when the logo appeared, and MOST of the time I would boot into TWRP. Sometimes it would just reboot, I would continue to hold up, and it would either reboot, or boot into TWRP. Occasionally I would get the recovery that came with the phone ?!?!
In any event, I managed to get into TWRP, boot into recovery, extract the boot.img, flash it... AND IT WORKED! Phone booted!
So after all this, I backed up EVERYTHING I could using TWRP. The Boot partition, System partition, EVERYTHING! It kept failing on the Data partition, but from my research that wasn't that important anyway. I then installed SuperRoot_noverity_nocrypt.zip, rebooted, installed phh's SuperUser, installed Root Checker, and finally, I have root!!
Thank you so much for the help. About to go "thank clicking" for all the help you provided.

[GUIDE][Z2 FORCE XT1789-05] Bootloader/TWRP/Custom ROMs/Root/Dirty flashing/Unbrick

First, thanks to @Uzephi and @41rw4lk for helping me to use/recover my phone. Please, read and do not underestimate the guides: our phone is tricky! We have two system partitions (slot a and b) to allow stock updates on-the-fly. This complicates the normal flashing process and if you do not follow the steps, you may bootloop. Use these guides at your own risk!
Reading this page is a good beginning to understanding the A/B partitioning scheme and how Motorola Z2 Force works:
1) Our phone has A/B partitioning, so flashing Magisk/XPosed is different
2) It does not support Project Treble (faster stock updates)
3) It does not a recovery partition, so flashing TWRP is different
Note also that the RSD Lite from Motorola has issues with Windows 10 and you’ll need to manual flash firmware if you bootloop (see Process E below). Other way is directly flashing from Qualcomm EDL mode (Emergency Download Mode) from which users can perform various tasks like unbricking, unlock bootloader, and installation of any custom ROMs.
Right now, this guide has 5 parts (maybe we can dual boot our phone in the future). If you just want to use a rooted stock ROM, please, search for other guides here on xda. These guides were written (and tested) using a Motorola Z2 Force XT1789-05 phone (Brazil), although most of it should work for other variants if you download and use proper firmware files for these other phones. For other models, better if you follow Uzephi’s guide.
A. Opening bootloader
B. Preparing the phone to move into custom ROMs (AOSP) + TWRP recovery
C. Flashing a custom AOSP ROM + rooting
D. Dirty flashing AOSP ROM updates
E. Recovering from bricks or returning to stock
F. Oreo ROM features comparison table
If you want to move your Motorola Z2 Force to Project Treble ROMs, please, check this guide.
Here is a list of the ROMs that are waiting for you.

A. Opening bootloader
With enough battery in your phone (80%), you can follow the Motorola official guide which steps are:
1. Backup everything you need. Your phone will be reseted including the internal sdcard.
2. Into the phone, enable the Developer Options clicking 7 times over the version (About section in the Settings). Go to Developer Options, click the OEM unlock option to enable it. Also enable USB debugging.
3. Install the Motorola drivers in your computer, but (in my personal experience) not the Android SDK suggested in the official guide. Instead, extract these adb/fastboot files in a blank folder of your computer.
3.1) Do not use other adb/fastboot binaries: I cannot guarantee they will work.
3.2) You need to use a USB 2.0 port of your computer. Some users report that USB 3.0 will also work.
4. Open a command line window in the adb/fastboot folder (step 3), reboot the phone into the bootloader (see adb command below or press power + volume down buttons). Plug the phone on computer (see 3.2 above). Test the connection and run the command to get the code for unlocking:
Code:
adb reboot bootloader
fastboot devices
fastboot oem get_unlock_data
You’ll get:
Code:
(bootloader) Unlock data:
(bootloader) <code 1>
(bootloader) <code 2>
(bootloader) <code 3>
(bootloader) <code 4>
(bootloader) <code 5>
5. You’ll need to join 5 codes and, after logging into your own Motorola account, check by clicking the button “Can my device be unlocked” (step 6) by Motorola here. Read the text: your warranty will be void if you go ahead. Consider if you have enough knowledge, time and money to deal with a troublesome (or bricked) device. Although, it’s not that easy to hard brick this phone (see process E below).
Code:
<code 1><code 2><code 3><code 4><code 5>
6. You’ll receive back an email with the code to unlock your bootloader (if it is available for your model). Then you’ll run the following command:
Code:
fastboot oem unlock <code 1><code 2><code 3><code 4><code 5>
7. You’ll receive a warning that all your data would be erased (see step 1 above) and need to re-run the same command to confirm. At this point, your bootloader should be unlocked. As an Android restriction, each time you boot the phone you’ll see a warning. Do nothing, wait for 5 seconds and the phone boots normally. Some users bother with this warning and try to get rid of it.

B. Preparing the phone to move into custom ROMs (AOSP) + TWRP recovery
Requirements: unlocked bootloader (see guide A) and no security lock: disable PIN, gestures and fingerprinting (because TWRP cannot read the locked/cryptographed data of the phone). Enough battery in your phone (80%).
If you do not prepare your phone to custom ROMs and if you do not have both bootloaders of the phone in the same Android version of the ROM you’ll flash, you’ll hard brick the phone and lose also the access to the bootloader! You’ve been warned: follow the guide!
Note: if you hard brick, I suggest you be prepared to follow the Unbrick Qualcomm mobiles with Step-by-step guide or the Unbrick All Qualcomm Snapdragon’s from Qualcomm HS-USB QDLoader 9008 guide, but I never tested them myself. You can also use Qualcomm Flash Image Loader (QFIL) tool.
1. Backup everything you need. Your phone will be reset including the internal sdcard.
2. Into the phone, enable the Developer Options clicking 7 times over the version (About section in the Settings). Go to Developer Options and enable USB debugging.
3. Install the Motorola drivers and the adb/fastboot files.
3.1) do not use other adb/fastboot binaries: we cannot guarantee they will work.
3.2) you need to use a USB 2.0 port of your computer. Some users report that USB 3.0 will also work.
4. Download the firmware of the same Android major version of the future ROM you’ll install (Oreo for Oreo ROMs, for instance). When (and if) we move to Android P, most probably we will need to follow this guide again.
- Retail (XT1789-05) (Europe/Brazil).
- Other models (branded): ATT, Sprint, T-Mobile (TMO), USC, Verizon.
- Note: NPXS26 versions stand for Nougat and OPXS27 for Oreo. You do not need Nougat versions for anything.
5. Extract the zip contents to a blank folder in your computer.
6. Download the FlashAll_XT1789-05.zip file, extract the content and move all files to the same firmware folder (step 5 above). Be sure to overwrite any file (if needed).
7. Run the Preparation.bat file there to generate the flashfile.bat file that will send the commands to the phone. Credits: the original preparation files were from RootJunky (can be downloaded here) and include more options that we do not need for our purpose here. Also, it includes adb/fastboot binaries that could not work with our phone.
8. Reboot the phone into the bootloader (see adb command below or power + volume down buttons). Open a command line window in the firmware folder (step 5 above), test the connection and execute the flashfile.bat file generated on step 7.
Code:
adb devices
adb reboot bootloader
fastboot devices
flashfile.bat
Never ever unplug the device from the USB 2.0 port while flashing the firmware. This could cause a hard brick and your device will be dead.
9. There is a pause at the end. You should review if everything went fine (or even click on the menu of the command line window, select all and copy&paste the contents in a .txt file for further help/revision).
10. Reboot your phone into the system (ROM) and do a quick configuration (remember that everything will be deleted when you install TWRP further…).
11. Into the phone, enable the Developer Options clicking 7 times over the version (About section in the settings). Go to Developer Options and enable USB debugging.
12. Download both the .img and .zip file of the TWRP recovery from the official site. It's the same file for all models/variants of Z2 Force phone. Put the files into our firmware folder (step 5 above). Copy the .zip file to the phone internal card. Note: versions older than 3.2.2-2 does not support PIN/Password/Fingerprint, so disable them before proceed. Most probably, ROMs before July 20th, 2018 cannot be flashed in older TWRP.
13. Now boot (not flash) the TWRP .img file using a command line window in the same firmware folder (step 5 above):
Code:
adb devices
adb reboot bootloader
fastboot devices
fastboot boot <TWRP file name>.img
14. Only now that you’re inside TWRP temporarily flash the TWRP .zip file you’ve saved into the phone (step 12 above).
15. Reboot into TWRP (use the main reboot menu in TWRP).
16. Now, you should reboot again into bootloader: inside TWRP, go to Reboot menu and choose Bootloader.
17. Now you will wipe all user data via bootloader. This is necessary to use an AOSP ROM when you come from stock. Using a command line window in the same firmware folder of your computer (step 5 above), run the following commands:
Code:
fastboot devices
fastboot -w
18. Now you can reboot the phone into System using the buttons volume up/down to navigate and confirming with the Power button. You’ll be with stock ROM and TWRP. If you want to move to a custom AOSP ROM, do a quick configuration: into the phone, enable the Developer Options clicking 7 times over the version (About section in the settings). Go to Developer Options and enable USB debugging and go to the proper guide (Process C).

C. Flashing a custom AOSP ROM + rooting
1. Requirements:
1.1 Motorola drivers.
1.2 Our custom adb/fastboot files (others may not work!).
1.3 USB debugging enabled into the Developer Options.
1.4 If you're using TWRP older than 3.2.2-2, disable disable PIN/gestures/fingerprinting. Also, most probably, ROMs after July 20th, 2018 cannot be flashed in older TWRP.
1.5 An USB 2.0 port of your computer (some users report that USB 3.0 will also work).
1.6 Two Oreo bootloaders (process B above).
1.7 Permanent TWRP
1.8 Enough battery in your phone (80%).
2. Download the AOSP ROM you want and move the .zip files to the phone. Right now, we have:
2.1 Dirty Unicorns: no need for Gapps. Official and Weeklies can be dirty flashed interchangeably. RC has a different signature. Support on Google+ page. More about DU kernel.
2.2 Lineage OS 15.1. MindTheGapps needed. OpenGapps not compatible yet. XDA thread.
2.3 Mokee: Gapps needed. Take care: online guides assume that you already have an AOSP ROM, TWRP and rooted device.
Deprecated (?)
2.4 AOSiP: no need for Gapps. XDA thread.
2.5 Invictrix. Gapps are built in. XDA thread
3. Choose the root method and download the .zip files: Magisk (suggested) or LineageOS SU Addon. Move the .zip files to phone. Note: if you bootloop on Magisk, most probably you’re flashing a wrong/different version of Magisk or you did not reboot between flashing ROM/Gapps and Magisk. Note: SuperSu is deprecated.
4. Reboot into TWRP:
Code:
adb reboot recovery
Then flash the ROM. It will be flashed in two steps only in the “other” slot. We have two slots, A and B. Our phone can be upgraded on-the-fly because the update is always applied to the slot not booted, the “other” slot. Then, immediately, flash the .zip TWRP or you will lose it.
5. Go to Reboot menu of TWRP and reboot into bootloader. Then, in the folder with adb/fastboot binaries (see 1.2 above), you need to wipe data (including sdcard) with the following commands:
Code:
fastboot devices
fastboot -w
6. Now you need to reboot the phone into System using the buttons volume up/down and confirming with the Power button (or typing fastboot reboot into the command line windows). You’ll be with an AOSP ROM and TWRP.
7. Once into the phone, enable the Developer Options clicking 7 times over the version (About section in the settings). Go to Developer Options and enable USB debugging if you intend to dirty flash ROM updates.
8. Reboot into TWRP again, flash Magisk (your settings and modules will be preserved). Note: if you bootloop on Magisk, remember it is mandatory to reboot between ROM flash (step 4 above) and GApps/Addon flash due to verity/slot-swap logic.
9. A good place to read what is not working is in the section known problems of LineageOS.

D. Dirty flashing AOSP ROM updates
1. If you follow all the processes above, you can dirty flash updates because you have:
1.1 Motorola drivers installed.
1.2 Specific adb/fastboot files for our phone and an USB 2.0 port in a Windows computer (some users report that USB 3.0 will also work).
1.3 Unlocked bootloaders (Process A above).
1.4 Permanent TWRP running and TWRP .zip file placed inside your phone and ready to be flashed again.
1.5 An AOSP ROM already running.
1.6 Developer Options and USB debugging enabled.
1.7 If you're using TWRP older than 3.2.2-2, disable disable PIN/gestures/fingerprinting. Also, most probably, ROMs after July 20th, 2018 cannot be flashed in older TWRP.
1.8 Enough battery in your phone (80%)
2. Download your ROM .zip update, copy it into the phone sdcard and reboot your phone into TWRP. See download links here.
3. Within TWRP you should flash (install) things in the following order:
3.1 ROM update .zip file. Remember that, at this time, the update will be flashed int the other slot and inside phone you’ll have both the system before update (in the booted slot) and updated ROM in the other slot.
3.2 TWRP .zip file (step 1.4 above) once again (do not skip this step or you’ll bootloop!).
4. Reboot to System: if you skip this step, you’ll bootloop.
5. Reboot into TWRP again, flash Magisk (your settings and modules will be preserved) or LineageOS SU Addon .zip file. Note: if you bootloop on Magisk, most probably you’re flashing a wrong/different version of Magisk. I suggest v16.0 and, after you got rooted with 16.0, you can update. It is mandatory to reboot between ROM flash (step 4 above) and GApps/Addon flash due to verity/slot-swap logic.
Note: SuperSu is deprecated.
6. Wipe Dalvik/ART cache: go to Wipe menu of TWRP > Advanced Wipe > Dalvik/ART Cache only.
7. Reboot your phone into System (ROM) will use the “other” slot, the one with the updated ROM.
8. You can use XPosed installer app (and reboot).
9. Now you can add your PIN, fingerprint, gestures back until next flashing.

E. Recovering from soft bricks or returning to Stock
If you’re reading this is because you already unlock your bootloader (see guide A) and anything went wrong, but you still can boot your phone into bootloader. Plug your phone and get enough battery (even if you do not see any charging signal).
1. Install the Motorola drivers and the specific adb/fastboot files for our phone. Remember, follow the rules because our device is tricky!
1.1) Do not use other adb/fastboot binaries: we cannot guarantee they will work.
1.2) You need to use a USB 2.0 port of your computer (some users report that USB 3.0 will also work).
2. Download the latest firmware for your model:
- Retail (XT1789-05) (Europe/Brazil).
- Other models (branded): ATT, Sprint, T-Mobile (TMO), USC, Verizon.
- Note: NPXS26 versions stand for Nougat and OPXS27 for Oreo. You do not need Nougat versions for anything.
3. Extract the zip contents to a blank folder in your computer.
4. Download the FlashAll_XT1789-05.zip file (it should work for other Motorola Z2 Force models as well), extract the content and move all files to the same firmware folder (step 2 above). Be sure to overwrite any file (if needed).
5. Run the Preparation.bat file there to generate the flashfile.bat file that will send the commands to the phone. Credits: the original preparation files were from RootJunky (can be downloaded here) and include more options that we do not need for our purpose here. Also, it includes adb/fastboot binaries that could not work with our phone.
6. Reboot the phone into the bootloader (see adb command below or power + volume down). Open a command line window in the firmware folder (step 5 above), test the connection and execute the flashfile.bat file generated on step 5.
Code:
adb reboot bootloader
fastboot devices
flashfile.bat
Never ever unplug the device from the USB 2.0 port while flashing the firmware. This could cause a hard brick and your device will be dead.
7. There is a pause at the end. You should review if everything went fine (or even click on the menu of the command line window, select all and copy&paste the contents in a .txt file for further help/revision).
8. Reboot your phone into system (ROM) and do not forget, later, to enable the Developer Options and USB debugging again.
Note: if you hard brick, I suggest you be prepared to follow the Unbrick Qualcomm mobiles with Step-by-step guide or the Unbrick All Qualcomm Snapdragon’s from Qualcomm HS-USB QDLoader 9008 guide, but I never tested them myself. You can also use Qualcomm Flash Image Loader (QFIL) tool. Maybe these Latest 2017 Qualcomm Diag QD-Loader Windows 10 Drivers signed will help you.

F. Oreo ROM features comparison
This is a table for Oreo ROM features comparison for Motorola Z2 Force - nash.
I would like to receive feedback and updates from the users, as I can't keep changing from one ROM to another and they get new features, updates, improvements, etc.
I consider Lineage OS 15.1 our stock ROM regarding to customization. So, it's not listed there.
Legend:
Code:
X = Feature present
XX = ROM excels in this particular feature (in my opinion).

If you want to move your Motorola Z2 Force to Project Treble ROMs, please, check this guide.
Here is a list of the ROMs that are waiting for you.

I came back to stock ROM. the problem is that it gets stuck in the initial configurations of the android trying to find a wifi network, to continue the configuration, without success, because I see in fastboot that the baseband is unknown, and I also can not install any rom, or recovery image because I have the following message in fastboot: FLASHING_LOCKED. and since I can not get past the initial android settings, I also can not unlock the developer options to enable OEM unlocking. now I'm standing in a rom that does not leave the initial configuration, it does not connect to any network and a fastboot that does not let me install anything. and I also tried the recovery mode and even tried to install an update via sideload, without success. I do not know what else to do if you can give me a light.

renanjones said:
I came back to stock ROM. the problem is that it gets stuck in the initial configurations of the android trying to find a wifi network, to continue the configuration, without success, because I see in fastboot that the baseband is unknown, and I also can not install any rom, or recovery image because I have the following message in fastboot: FLASHING_LOCKED. and since I can not get past the initial android settings, I also can not unlock the developer options to enable OEM unlocking. now I'm standing in a rom that does not leave the initial configuration, it does not connect to any network and a fastboot that does not let me install anything. and I also tried the recovery mode and even tried to install an update via sideload, without success. I do not know what else to do if you can give me a light.
Click to expand...
Click to collapse
I see two possible scenarios:
1. Your bootloader is locked (yet) (see guide A).
2. Your in a "false locked" situation that, maybe, could be solved by resetting data via recovery or in bootloader (with the command: fastboot -w).

Great tutorial, but I did not get 4g in any of the roms, only 3g

Gutto said:
Great tutorial, but I did not get 4g in any of the roms, only 3g
Click to expand...
Click to collapse
I got 4G in any ROM... AOSIP, DU or Invictrix...
Are you using a branded (carrier) phone? If not, maybe you should return to stock (to recover any changes on partitions).

Technical said:
I got 4G in any ROM... AOSIP, DU or Invictrix...
Are you using a branded (carrier) phone? If not, maybe you should return to stock (to recover any changes on partitions).
Click to expand...
Click to collapse
My cell phone and Sprint, I did every process that you indicated, but not 4G

So I followed the instructions as noted, as soon as I got to the root installation part, it started throwing a "cannot mount /system" error. I thought a reboot would solve the issue, but now I think I'm bricked. Can't boot into anything, all I can do is plug my phone in and listen to it keep disconnecting every 10 seconds or so. The phone had booted up fine prior to starting the installation process, and I don't see how just a bad ROM install is preventing me from getting into either bootloader or recovery. Any advice?
For clarity, i'm unable to use QBOOT to do anything since after it hits the "powered on" state I'm assuming it's in, it just resets and does the same thing over and over again

shalpp said:
So I followed the instructions as noted, as soon as I got to the root installation part, it started throwing a "cannot mount /system" error. I thought a reboot would solve the issue, but now I think I'm bricked. Can't boot into anything, all I can do is plug my phone in and listen to it keep disconnecting every 10 seconds or so. The phone had booted up fine prior to starting the installation process, and I don't see how just a bad ROM install is preventing me from getting into either bootloader or recovery. Any advice?
For clarity, i'm unable to use QBOOT to do anything since after it hits the "powered on" state I'm assuming it's in, it just resets and does the same thing over and over again
Click to expand...
Click to collapse
Have you tried holding vol dwn + pwr btn to force it into bootloader mode? If you can get there, then you can use the keys to get to recovery and try a factory reset. If that don't work, go back to bootloader mode and try flashing back to stock. Might double check that the battery has plenty of charge.

41rw4lk said:
Have you tried holding vol dwn + pwr btn to force it into bootloader mode? If you can get there, then you can use the keys to get to recovery and try a factory reset. If that don't work, go back to bootloader mode and try flashing back to stock. Might double check that the battery has plenty of charge.
Click to expand...
Click to collapse
I'm unable to get the phone out of qboot (or whatever it's called). I've tried using a blank-flash but all that happens is device restarts as made evident by the "device disconnect" sound playing every few seconds. The phone had around 80% when I started the process. Should I just let it die and try loading into BL after a few hours of this thing power cycling itself?

shalpp said:
I'm unable to get the phone out of qboot (or whatever it's called). I've tried using a blank-flash but all that happens is device restarts as made evident by the "device disconnect" sound playing every few seconds. The phone had around 80% when I started the process. Should I just let it die and try loading into BL after a few hours of this thing power cycling itself?
Click to expand...
Click to collapse
It's weird that it is power cycling like that. Have you tired unplugging the phone and booting? Whether it's recovery, bootloader, qboot; you need to get to one place or the other if possible because power cycling won't allow you to do anything. If you can get a stable boot in any mode I would suggest moving your cable to another port so any corruptions aren't a factor anymore. I don't think a drain will resolve anything, but I've never heard anyone mention power cycling like that.

41rw4lk said:
It's weird that it is power cycling like that. Have you tired unplugging the phone and booting? Whether it's recovery, bootloader, qboot; you need to get to one place or the other if possible because power cycling won't allow you to do anything. If you can get a stable boot in any mode I would suggest moving your cable to another port so any corruptions aren't a factor anymore. I don't think a drain will resolve anything, but I've never heard anyone mention power cycling like that.
Click to expand...
Click to collapse
Power cycling is just an assumption since regardless of whatever port its in it keeps an endless loop of connect, disconnect". Basically after rebooting the device after attempting to install the ROM is when it went black and started not doing anything other than connect, disconnect

shalpp said:
Power cycling is just an assumption since regardless of whatever port its in it keeps an endless loop of connect, disconnect". Basically after rebooting the device after attempting to install the ROM is when it went black and started not doing anything other than connect, disconnect
Click to expand...
Click to collapse
When it's trying to connect do you have a pop up on your pc showing what it sees the phone as? Does it say nash fastboot, or 9008, Z2? That might give some idea of where it's failing.

41rw4lk said:
When it's trying to connect do you have a pop up on your pc showing what it sees the phone as? Does it say nash fastboot, or 9008, Z2? That might give some idea of where it's failing.
Click to expand...
Click to collapse
It appears as Qualcomm 9008
It only starts the loop after starting a blankflash. That's about the only response I get out of the device, otherwise it does absolutely nothing, no combination of buttons do anything
Edit: Confirmed connect/disconnect on another machine with the same driver configuration

Moto E5 XT1944-3 Nora, is there a way to root?

I've checked the forum beforehand to see if there's a way to root, and yeh, there is, but a lot of them say "XT1944-2 and XT1944-4 only" but mine is XT1944-3 and honestly I'm afraid i'll ruin my phone, I've been rooting my phones since 2014ish but this has to be the most complicated phone I'd ever have to deal with, I love it the way it is but I just miss root and xposed a lot, please

andienchancer said:
I've checked the forum beforehand to see if there's a way to root, and yeh, there is, but a lot of them say "XT1944-2 and XT1944-4 only" but mine is XT1944-3 and honestly I'm afraid i'll ruin my phone, I've been rooting my phones since 2014ish but this has to be the most complicated phone I'd ever have to deal with, I love it the way it is but I just miss root and xposed a lot, please
Click to expand...
Click to collapse
Try this -- even in the event it doesn't work, it is virtually completely safe and runs no risk of bricking your device. First, of course, you will need to unlock your device's bootloader. If you haven't already done so, let me know and I can provide you some guidance. Visit this link for instructions and support on unlocking the bootloader: https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-a
Next, download a recent firmware package for your device. You can find one at http://mirrors.lolinet.com. Extract the boot.img file from the package and save it to your device. On your device, download the Magisk Manager application. Select install, then select the "Patch Boot Image" option, and navigate to the saved boot.img file. Once Magisk patches your boot image, save the patched image to your PC or laptop in your adb/fastboot directory (assuming you have adb/fastboot set up on your PC. If not, see my link at the end of this post to download it. Also, if you haven't done so, install the latest Motorola Device Manager on your PC from Motorola's official website. It will ensure that current USB device drivers are installed on your PC/laptop. Visit this link to download the latest version: https://support.motorola.com/us/en/solution/MS88481 ). Now boot your device into fastboot mode, connect your device to your PC, open a command window in your adb/fastboot path, and execute this command:
fastboot devices
If you are properly connected, an alphanumeric string will be returned via the command window, which is your device serial number. Now execute these fastboot commands:
fastboot flash boot patched_boot.img
fastboot reboot
** NOTE: It is completely normal for your device to boot loop a couple of times during the initial boot sequence. This shouldn't occur during the second and subsequent boots.
Upon reboot, open the Magisk Manager app again and you should have systemless root installed. If, however, anything goes south and you get stuck in a boot loop, you can always save face by flashing the stock boot image from the firmware package by:
fastboot flash boot boot.img
fastboot reboot
This exact method has been confirmed to achieve systemless root on a number of the Moto E5, E5 Plus & E5 Play variants, without the need for installing TWRP custom recovery. In essence, if your device has an unlockable bootloader, this should work.
Minimal ADB & Fastboot v1.4.3: https://drive.google.com/file/d/0B1Sfod4HWfk2T0hia0k3Y3pIczA/view?usp=drivesdk

It gives me bootloop, can I do it flashing twrp and the zip file?

reserved

Moto E5 XT1944-3 Nora solution
andienchancer said:
It gives me bootloop, can I do it flashing twrp and the zip file?
Click to expand...
Click to collapse
i can find solution in this post, just install twrp until, password encryption dont show.

LenovoTech said:
Try this -- even in the event it doesn't work, it is virtually completely safe and runs no risk of bricking your device. First, of course, you will need to unlock your device's bootloader. If you haven't already done so, let me know and I can provide you some guidance. Visit this link for instructions and support on unlocking the bootloader: https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-a
Next, download a recent firmware package for your device. You can find one at http://mirrors.lolinet.com. Extract the boot.img file from the package and save it to your device. On your device, download the Magisk Manager application. Select install, then select the "Patch Boot Image" option, and navigate to the saved boot.img file. Once Magisk patches your boot image, save the patched image to your PC or laptop in your adb/fastboot directory (assuming you have adb/fastboot set up on your PC. If not, see my link at the end of this post to download it. Also, if you haven't done so, install the latest Motorola Device Manager on your PC from Motorola's official website. It will ensure that current USB device drivers are installed on your PC/laptop. Visit this link to download the latest version: https://support.motorola.com/us/en/solution/MS88481 ). Now boot your device into fastboot mode, connect your device to your PC, open a command window in your adb/fastboot path, and execute this command:
fastboot devices
If you are properly connected, an alphanumeric string will be returned via the command window, which is your device serial number. Now execute these fastboot commands:
fastboot flash boot patched_boot.img
fastboot reboot
** NOTE: It is completely normal for your device to boot loop a couple of times during the initial boot sequence. This shouldn't occur during the second and subsequent boots.
Upon reboot, open the Magisk Manager app again and you should have systemless root installed. If, however, anything goes south and you get stuck in a boot loop, you can always save face by flashing the stock boot image from the firmware package by:
fastboot flash boot boot.img
fastboot reboot
This exact method has been confirmed to achieve systemless root on a number of the Moto E5, E5 Plus & E5 Play variants, without the need for installing TWRP custom recovery. In essence, if your device has an unlockable bootloader, this should work.
Minimal ADB & Fastboot v1.4.3: https://drive.google.com/file/d/0B1Sfod4HWfk2T0hia0k3Y3pIczA/view?usp=drivesdk
Click to expand...
Click to collapse
LenovoTech said:
Try this -- even in the event it doesn't work, it is virtually completely safe and runs no risk of bricking your device. First, of course, you will need to unlock your device's bootloader. If you haven't already done so, let me know and I can provide you some guidance. Visit this link for instructions and support on unlocking the bootloader: https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-a
Next, download a recent firmware package for your device. You can find one at http://mirrors.lolinet.com. Extract the boot.img file from the package and save it to your device. On your device, download the Magisk Manager application. Select install, then select the "Patch Boot Image" option, and navigate to the saved boot.img file. Once Magisk patches your boot image, save the patched image to your PC or laptop in your adb/fastboot directory (assuming you have adb/fastboot set up on your PC. If not, see my link at the end of this post to download it. Also, if you haven't done so, install the latest Motorola Device Manager on your PC from Motorola's official website. It will ensure that current USB device drivers are installed on your PC/laptop. Visit this link to download the latest version: https://support.motorola.com/us/en/solution/MS88481 ). Now boot your device into fastboot mode, connect your device to your PC, open a command window in your adb/fastboot path, and execute this command:
fastboot devices
If you are properly connected, an alphanumeric string will be returned via the command window, which is your device serial number. Now execute these fastboot commands:
fastboot flash boot patched_boot.img
fastboot reboot
** NOTE: It is completely normal for your device to boot loop a couple of times during the initial boot sequence. This shouldn't occur during the second and subsequent boots.
Upon reboot, open the Magisk Manager app again and you should have systemless root installed. If, however, anything goes south and you get stuck in a boot loop, you can always save face by flashing the stock boot image from the firmware package by:
fastboot flash boot boot.img
fastboot reboot
This exact method has been confirmed to achieve systemless root on a number of the Moto E5, E5 Plus & E5 Play variants, without the need for installing TWRP custom recovery. In essence, if your device has an unlockable bootloader, this should work.
Minimal ADB & Fastboot v1.4.3: https://drive.google.com/file/d/0B1Sfod4HWfk2T0hia0k3Y3pIczA/view?usp=drivesdk
Click to expand...
Click to collapse
I can confirm that the procedure works for Moto E5 Play XT1920-18.

[ROOT] EU LMV405EBW - Magisk

I couldn't find any guide for rooting the V40, so I thought I'd write down the steps I took to root my new EUR V40 - LMV405EBW. Maybe it will help others. Sorry if this is somewhat confusing, I didn't have time to make a polished version. It's basically made from my notes during the process with the commands copied from bash history.
-First, unlock the bootloader following LG's instructions here: https://developer.lge.com/resource/mobile/RetrieveBootloader.dev
There's no TWRP for the V40 and the one made for G7 doesn't work. I don't have the time and knowledge to even attempt to compile TWRP for the V40, so I proceeded with just patching an original boot image with Magisk.
You can get the patched boot images that I used from here:
Oreo 10e: boot_a_magisk_patched_10e.img
Oreo 20f: boot_a_magisk_patched_10f.img
Pie 20a: boot_a_magisk_patched_20a.img
Pie 20b: boot_a_magisk_patched_20b.img
Pie 20f: boot_a_magisk_patched_20f.img
Pie 20g: boot_a_magisk_patched_20g.img
Q 30b: boot_a_magisk_patched_30b.img (this requires flashing to the active boot partition).
Q 30c: boot_a_magisk_patched_30c.img (this requires flashing to the active boot partition)
Q 30d: boot_a_magisk_patched_30d.image (this may or may not work with "fastboot boot" and could require flashing to the active boot partition. I haven't tested if live boot still works. I just did fastboot flash boot_x img_file).
You can try to boot it with with fastboot if you have a LNV405EBW and skip the KDZ extraction part.
Installing Magisk:
Flashing this image isn't necessary, just straight boot should be sufficient and safe.
First install Magisk Manager 7 on the phone then connect the phone to the PC and run:
Code:
adb reboot bootloader
fastboot boot boot_a_magisk_patched_10e.img
After the phone boots the OS with the external boot image, open Magisk Manager and tap on Install. Select the option to Direct install to the active slot. I played it safe and decided to NOT flash also on the inactive slot. I've left it alone so I can use it in case of need of recovery.
You'll probably notice that you don't have a connection to the carrier. Just ignore it, it will back once the phone is booted normally.
Reboot and you will have permanent root until you switch the A/B slots.
In case my patched boot image doesn't work, you can just make your own.
Tools needed:
Magisk Manager 7.0.0 installed on the phone
LG Bridge installed on a Windows machine.
a Linux machine or VM (I used the latest ubuntu desktop), python3 with the zstandard module installed and kdztools from steadfasterX's repo. Maybe kdztools would work on Windows too, I haven't tried it.
adb, fastboot
You need to procure an original ROM file for your phone model. It can be downloaded easily with LG Bridge. Just connect the phone to a Windows PC, start LG bridge, go to the Software update tab and click on Update error recovery. Wait for the download to start and disconnect the phone. Ignore LG Bridge complains about not being able to flash after the downloading stage is completed. Don't click anything in Bridge and before closing it go to C:\Users\<your_username>\AppData\Local\LG Electronics\LG Bridge\SWUpgrade and copy your KDZ somewhere else. Preferably send it to the Linux VM to the LG work folder, it'll be needed there.
On Linux open a terminal:
Code:
cd ~/Documents
mkdir LG
cd LG
git clone https://github.com/steadfasterX/kdztools.git
cd kdztools
nano undz.py -c
For kdztools to be able to extract the V40 images, I needed to edit undz.py and comment the lines 88-90. So, this block should all be commented or undz will fail to extract the boot partitions.
Code:
#if len(dz_item['pad']) != 0:
# print("[!] Error: pad is not empty", file=sys.stderr)
# sys.exit(1)
To extract, with the KDZ copied to ~/Documents/LG/
Code:
cd ~/Documents/LG/kdztools
./unkdz.py -f ../V405EBW10e_00_OPEN_EU_DS_OP_0109.kdz -x
cd kdzextracted/
List the partitions contents and look for the IDs of boot_a and/or boot_b. In my case they were 44 for boot_a and 63 for boot_b
Code:
../undz.py -f V40510e_00.dz -l
Extract boot_a or boot_b or both, they're identical:
Code:
../undz.py -f V40510e_00.dz -s 44
../undz.py -f V40510e_00.dz -s 63
You can find the extracted boot images in the dzextracted subfolder. Get boot_a.image or boot_b.image or both from there and send them to the phone in a location accessible by Magisk Manager. The Download folder should do fine.
Open Magisk Manager and tap Install, select Patch Boot Image file and patch the image file(s) you extracted. Get the patched_boot.img that Magisk Manager saves in the Download folder and send it to a PC where you have adb and fastboot.
Go to the beginning of the post to the Installing Magisk section.

Damned tempting, but I'll wait until after Pie drops.
Sent from my LM-V405 using Tapatalk

Glad to see this, hopefully it's a start for all of us.

If anything, at least a way to unlock the bootloader via legitimate channels! Gonna be generating that string, next chance I get, to be ready.
Sent from my LM-V405 using Tapatalk

Once runningnak3d gets a hold of this, we should be good with the v40. Cool beans.

Hey do the unlock codes online work for $ 12-15 on sprint? I used to flash phones back in the day and got a great deal on a bad IMEI sprint lg v40, but so far I can see there isn’t a way yet. On top off all that I m in Europe and don’t want to get the error message that I m out of the Region. I would have to go to USA just to unlock the phone.

@runningnak3d

Can't I install the firmware on a different device?

V version can not unlock BL, so envious

Getting a boot image like that works but I find it stupid to not upload it so that the others don't have to do it. Besides only one model can be bl unlocked so there won't be any model mismatch (except firmware versions but keeping up with them is not that hard)

LameMonster82 said:
Getting a boot image like that works but I find it stupid to not upload it so that the others don't have to do it. Besides only one model can be bl unlocked so there won't be any model mismatch (except firmware versions but keeping up with them is not that hard)
Click to expand...
Click to collapse
Or I could find you stupid for not noticing the patched image is in my first post.

DLS123 said:
I find you stupid for not noticing the patched images are in my first post.
Click to expand...
Click to collapse
I recommend labeling the boot images with their firmware since future firmwares won't be able to run the same boot image but other than that I'm really sorry.

LameMonster82 said:
I recommend labeling the boot images with their firmware since future firmwares won't be able to run the same boot image but other than that I'm really sorry.
Click to expand...
Click to collapse
I mentioned in the description 1 line below the link that it's for 10e. There was no other update in a long time. I don't think there can be any confusion for now. I can edit and label the file when there's will be another fw update.

It looks like unlocking the bootloader breaks Widevine L1 on the V40 and downgrades is to L3. No more HD or UHD Netflix.
I couldn't find any other solution than to re-lock the bootloader to restore L1.
This doesn't happen on the V30.

@DLS123
Thank you for all!
I ask you for more details; i'm stuck at flashing first image in adb; it returns an error; have LMV405EBW with 10f. unlocked bootloader of course
Thx again for your support!

@daphix what do you mean by flashing the first image? You're not supposed to flash my patched boot image. Just boot it without flashing and Direct install Magisk from it with Magisk Manager.

DLS123 said:
@daphix what do you mean by flashing the first image? You're not supposed to flash my patched boot image. Just boot it without flashing and Direct install Magisk from it with Magisk Manager.
Click to expand...
Click to collapse
Thx for answer; i not have too much experience in working with Magisk;
i just folowed your steps:
First install Magisk Manager 7 on the phone then connect the phone to the PC and run:
adb reboot bootloader
fastboot boot patched_boot_a.img
when i run fastboot comand for flash, is runing, but is returning "an error at line x"
i suppose is something wrong in this instructions.

daphix said:
Thx for answer; i not have too much experience in working with Magisk;
i just folowed your steps:
First install Magisk Manager 7 on the phone then connect the phone to the PC and run:
adb reboot bootloader
fastboot boot patched_boot_a.img
when i run fastboot comand for flash, is runing, but is returning "an error at line x"
Anyway; understand now what to do;
Steps are below:
- first install magisk manager
- download magisk zip from magisk site or from magisk manager himself on phone
- download patched_boot_a.img to phone from our good contributor
- use magisk manager and select inslall image of patched_boot_a.img from phone
- magisk manager will generate a magisk patched image
- transfer this magisk patched image (not patched_boot_a.img) to pc in ADB folder
- flash with Adb this magisk patched image from pc to phone.
Thx to our friend!
---------- Post added at 09:53 AM ---------- Previous post was at 09:21 AM ----------
DLS123 said:
@daphix what do you mean by flashing the first image? You're not supposed to flash my patched boot image. Just boot it without flashing and Direct install Magisk from it with Magisk Manager.
Click to expand...
Click to collapse
Hi;
using Magisk mamanger and your file was generated a file: magisk_patched.img
pls support; trying to flash that image from PC with adb not work:
fastboot flash partition_a magisk_patched.img
Click to expand...
Click to collapse

@daphix
Whatver you're trying to do, is nowhere in the procedure I used. If you already booted with my boot image why are you making another boot image with Magisk and why are you trying to flash that? I never wrote anything of the sort.
if you booted with my patched image you already have temporary root and can use Magisk Manager to Direct install Magisk itself.

DLS123 said:
@daphix
Whatver you're trying to do, is nowhere in the procedure I used. If you already booted with my boot image why are you making another boot image with Magisk and why are you trying to flash that? I never wrote anything of the sort.
if you booted with my patched image you already have temporary root and can use Magisk Manager to Direct install Magisk itself.
Click to expand...
Click to collapse
Hi , thank you for reply;
I tried many combinations of your commands;
maybe due that am noob, but succesion below simply is not working:
First install Magisk Manager 7 on the phone then connect the phone to the PC and run:
adb reboot bootloader
fastboot boot patched_boot_a.img