Develop Bugs

problem with injection dll to cprog.exe process

Call PerformCallback4 failed. Error Number = 6. (The handle is invalid.)
But the handle of the cprog.exe process is right.
source code:
Code:
VOID
InjectDllToCprog()
{
WCHAR DllPath[MAX_PATH] = L"";
CallbackInfo ci;
GetModuleFileName(NULL, DllPath, MAX_PATH);
PWCHAR p = wcsrchr(DllPath, L'\\');
DllPath[p - DllPath] = '\0';
wcscat(DllPath, L"\\CprogInject.dll");
ZeroMemory(&ci, sizeof(ci));
g_hCprog = FindCprogProcess(L"Cprog.exe");
if(g_hCprog != NULL)
{
DWORD dwMode = SetKMode(TRUE);
DWORD dwPerm = SetProcPermissions(0xFFFFFFFF);
FARPROC pFunc = GetProcAddress(GetModuleHandle(L"Coredll.dll"), L"LoadLibraryW");
ci.ProcId = (HANDLE)g_hCprog;
ci.pFunc = (FARPROC)MapPtrToProcess(pFunc, g_hCprog);
ci.pvArg0 = MapPtrToProcess(DllPath, GetCurrentProcess());
g_InjectCprog = (HINSTANCE)PerformCallBack4(&ci, 0, 0, 0);
if(GetLastError() != 0)
DbgError(L"PerformCallBack 执行失败", GetLastError());
SetKMode(dwMode);
SetProcPermissions(dwPerm);
}
}
Anyone can help me?

[Q] Overclocking?

Can someone throw some light on overclocking.
my friend told me that a CPU frequency can not be changed bcos u have to actually change the no. of oscillations per cycle.. which is not possible by coding.. so i have a question that all these overclocking are done on what basis?
Code:
static struct clkctl_acpu_speed acpu_freq_tbl_oc[] = {
{ {1, 1}, 192000, ACPU_PLL_8, 3, 1, 0, 0, L2(1), 800000, 0x03006000},
/* MAX_AXI row is used to source CPU cores and L2 from the AFAB clock. */
{ {0, 0}, MAX_AXI, ACPU_AFAB, 1, 0, 0, 0, L2(0), 825000, 0x03006000},
{ {1, 1}, 384000, ACPU_PLL_8, 3, 0, 0, 0, L2(1), 825000, 0x03006000},
{ {1, 1}, 432000, ACPU_SCPLL, 0, 0, 1, 0x08, L2(1), 850000, 0x03006000},
{ {1, 1}, 486000, ACPU_SCPLL, 0, 0, 1, 0x09, L2(2), 850000, 0x03006000},
{ {1, 1}, 540000, ACPU_SCPLL, 0, 0, 1, 0x0A, L2(3), 875000, 0x03006000},
{ {1, 1}, 594000, ACPU_SCPLL, 0, 0, 1, 0x0B, L2(4), 875000, 0x03006000},
{ {1, 1}, 648000, ACPU_SCPLL, 0, 0, 1, 0x0C, L2(5), 900000, 0x03006000},
{ {1, 1}, 702000, ACPU_SCPLL, 0, 0, 1, 0x0D, L2(6), 900000, 0x03006000},
{ {1, 1}, 756000, ACPU_SCPLL, 0, 0, 1, 0x0E, L2(7), 925000, 0x03006000},
{ {1, 1}, 810000, ACPU_SCPLL, 0, 0, 1, 0x0F, L2(8), 975000, 0x03006000},
{ {1, 1}, 864000, ACPU_SCPLL, 0, 0, 1, 0x10, L2(9), 975000, 0x03006000},
{ {1, 1}, 918000, ACPU_SCPLL, 0, 0, 1, 0x11, L2(10), 1000000, 0x03006000},
{ {1, 1}, 972000, ACPU_SCPLL, 0, 0, 1, 0x12, L2(11), 1025000, 0x03006000},
{ {1, 1}, 1026000, ACPU_SCPLL, 0, 0, 1, 0x13, L2(12), 1025000, 0x03006000},
{ {1, 1}, 1080000, ACPU_SCPLL, 0, 0, 1, 0x14, L2(13), 1050000, 0x03006000},
{ {1, 1}, 1134000, ACPU_SCPLL, 0, 0, 1, 0x15, L2(14), 1075000, 0x03006000},
{ {1, 1}, 1188000, ACPU_SCPLL, 0, 0, 1, 0x16, L2(15), 1100000, 0x03006000},
{ {1, 1}, 1242000, ACPU_SCPLL, 0, 0, 1, 0x17, L2(16), 1125000, 0x03006000},
{ {1, 1}, 1296000, ACPU_SCPLL, 0, 0, 1, 0x18, L2(17), 1150000, 0x03006000},
{ {1, 1}, 1350000, ACPU_SCPLL, 0, 0, 1, 0x19, L2(18), 1150000, 0x03006000},
{ {1, 1}, 1404000, ACPU_SCPLL, 0, 0, 1, 0x1A, L2(19), 1175000, 0x03006000},
{ {1, 1}, 1458000, ACPU_SCPLL, 0, 0, 1, 0x1B, L2(20), 1200000, 0x03006000},
{ {1, 1}, 1512000, ACPU_SCPLL, 0, 0, 1, 0x1C, L2(21), 1225000, 0x03006000},
{ {1, 1}, 1566000, ACPU_SCPLL, 0, 0, 1, 0x1D, L2(22), 1225000, 0x03006000},
{ {1, 1}, 1620000, ACPU_SCPLL, 0, 0, 1, 0x1E, L2(22), 1250000, 0x03006000},
{ {1, 1}, 1674000, ACPU_SCPLL, 0, 0, 1, 0x1F, L2(22), 1275000, 0x03006000},
{ {1, 1}, 1728000, ACPU_SCPLL, 0, 0, 1, 0x20, L2(22), 1300000, 0x03006000},
#ifdef CONFIG_OC_ULTIMATE
{ {1, 1}, 1782000, ACPU_SCPLL, 0, 0, 1, 0x21, L2(22), 1325000, 0x03006000},
{ {1, 1}, 1836000, ACPU_SCPLL, 0, 0, 1, 0x22, L2(22), 1337500, 0x03006000},
{ {1, 1}, 1890000, ACPU_SCPLL, 0, 0, 1, 0x23, L2(22), 1350000, 0x03006000},
{ {1, 1}, 1944000, ACPU_SCPLL, 0, 0, 1, 0x24, L2(22), 1362500, 0x03006000},
{ {1, 1}, 1998000, ACPU_SCPLL, 0, 0, 1, 0x25, L2(22), 1375000, 0x03006000},
{ {1, 1}, 2052000, ACPU_SCPLL, 0, 0, 1, 0x26, L2(22), 1400000, 0x03006000},
for eg. what are these numbers (384000) on the left side of the table? are these frequencies or what?
And pls can someone explain how actually overclocking is done?
@abcdjdj maybe you know something?

anikesh102 said:
Can someone throw some light on overclocking.
my friend told me that a CPU frequency can not be changed bcos u have to actually change the no. of oscillations per cycle.. which is not possible by coding.. so i have a question that all these overclocking are done on what basis?
Code:
static struct clkctl_acpu_speed acpu_freq_tbl_oc[] = {
{ {1, 1}, 192000, ACPU_PLL_8, 3, 1, 0, 0, L2(1), 800000, 0x03006000},
/* MAX_AXI row is used to source CPU cores and L2 from the AFAB clock. */
{ {0, 0}, MAX_AXI, ACPU_AFAB, 1, 0, 0, 0, L2(0), 825000, 0x03006000},
{ {1, 1}, 384000, ACPU_PLL_8, 3, 0, 0, 0, L2(1), 825000, 0x03006000},
{ {1, 1}, 432000, ACPU_SCPLL, 0, 0, 1, 0x08, L2(1), 850000, 0x03006000},
{ {1, 1}, 486000, ACPU_SCPLL, 0, 0, 1, 0x09, L2(2), 850000, 0x03006000},
{ {1, 1}, 540000, ACPU_SCPLL, 0, 0, 1, 0x0A, L2(3), 875000, 0x03006000},
{ {1, 1}, 594000, ACPU_SCPLL, 0, 0, 1, 0x0B, L2(4), 875000, 0x03006000},
{ {1, 1}, 648000, ACPU_SCPLL, 0, 0, 1, 0x0C, L2(5), 900000, 0x03006000},
{ {1, 1}, 702000, ACPU_SCPLL, 0, 0, 1, 0x0D, L2(6), 900000, 0x03006000},
{ {1, 1}, 756000, ACPU_SCPLL, 0, 0, 1, 0x0E, L2(7), 925000, 0x03006000},
{ {1, 1}, 810000, ACPU_SCPLL, 0, 0, 1, 0x0F, L2(8), 975000, 0x03006000},
{ {1, 1}, 864000, ACPU_SCPLL, 0, 0, 1, 0x10, L2(9), 975000, 0x03006000},
{ {1, 1}, 918000, ACPU_SCPLL, 0, 0, 1, 0x11, L2(10), 1000000, 0x03006000},
{ {1, 1}, 972000, ACPU_SCPLL, 0, 0, 1, 0x12, L2(11), 1025000, 0x03006000},
{ {1, 1}, 1026000, ACPU_SCPLL, 0, 0, 1, 0x13, L2(12), 1025000, 0x03006000},
{ {1, 1}, 1080000, ACPU_SCPLL, 0, 0, 1, 0x14, L2(13), 1050000, 0x03006000},
{ {1, 1}, 1134000, ACPU_SCPLL, 0, 0, 1, 0x15, L2(14), 1075000, 0x03006000},
{ {1, 1}, 1188000, ACPU_SCPLL, 0, 0, 1, 0x16, L2(15), 1100000, 0x03006000},
{ {1, 1}, 1242000, ACPU_SCPLL, 0, 0, 1, 0x17, L2(16), 1125000, 0x03006000},
{ {1, 1}, 1296000, ACPU_SCPLL, 0, 0, 1, 0x18, L2(17), 1150000, 0x03006000},
{ {1, 1}, 1350000, ACPU_SCPLL, 0, 0, 1, 0x19, L2(18), 1150000, 0x03006000},
{ {1, 1}, 1404000, ACPU_SCPLL, 0, 0, 1, 0x1A, L2(19), 1175000, 0x03006000},
{ {1, 1}, 1458000, ACPU_SCPLL, 0, 0, 1, 0x1B, L2(20), 1200000, 0x03006000},
{ {1, 1}, 1512000, ACPU_SCPLL, 0, 0, 1, 0x1C, L2(21), 1225000, 0x03006000},
{ {1, 1}, 1566000, ACPU_SCPLL, 0, 0, 1, 0x1D, L2(22), 1225000, 0x03006000},
{ {1, 1}, 1620000, ACPU_SCPLL, 0, 0, 1, 0x1E, L2(22), 1250000, 0x03006000},
{ {1, 1}, 1674000, ACPU_SCPLL, 0, 0, 1, 0x1F, L2(22), 1275000, 0x03006000},
{ {1, 1}, 1728000, ACPU_SCPLL, 0, 0, 1, 0x20, L2(22), 1300000, 0x03006000},
#ifdef CONFIG_OC_ULTIMATE
{ {1, 1}, 1782000, ACPU_SCPLL, 0, 0, 1, 0x21, L2(22), 1325000, 0x03006000},
{ {1, 1}, 1836000, ACPU_SCPLL, 0, 0, 1, 0x22, L2(22), 1337500, 0x03006000},
{ {1, 1}, 1890000, ACPU_SCPLL, 0, 0, 1, 0x23, L2(22), 1350000, 0x03006000},
{ {1, 1}, 1944000, ACPU_SCPLL, 0, 0, 1, 0x24, L2(22), 1362500, 0x03006000},
{ {1, 1}, 1998000, ACPU_SCPLL, 0, 0, 1, 0x25, L2(22), 1375000, 0x03006000},
{ {1, 1}, 2052000, ACPU_SCPLL, 0, 0, 1, 0x26, L2(22), 1400000, 0x03006000},
for eg. what are these numbers (384000) on the left side of the table? are these frequencies or what?
And pls can someone explain how actually overclocking is done?
@abcdjdj maybe you know something?
Click to expand...
Click to collapse
I don't know much about kernel programming but, yes those are the frequencies on the left side of the table. They are measured in kHz (kilo hertz). You must divide the number by 1000 to get the frequency in mHz and divide by 10^6 to get it in GHz. Usually overclocking means extending the array of structures along with the corresponding voltage values. But in our acpuclock-8x60.c file, there are multiple structures which have the frequency table and there is a function called :-
Code:
static __init struct clkctl_acpu_speed *select_freq_plan(void)
which decides which frequency table to chose. So basically there is a switch case block in that function which looks like this -
Code:
switch (pvs) {
case 0x0:
case 0x7:
acpu_freq_tbl =acpu_freq_tbl_1512mhz_slow;
pr_info("ACPU PVS: Slow\n");
break;
case 0x1:
acpu_freq_tbl = acpu_freq_tbl_1512mhz_nom;
pr_info("ACPU PVS: Nominal\n");
break;
case 0x3:
acpu_freq_tbl = acpu_freq_tbl_1512mhz_fast;
pr_info("ACPU PVS: Fast\n");
break;
default:
acpu_freq_tbl = acpu_freq_tbl_1512mhz_slow;
pr_warn("ACPU PVS: Unknown. Defaulting to slow.\n");
break;
}
Here depending on the variable pvs (unfortunately can't figure out what pvs is ), the frequency table is chosen. So we need to assign acpu_freq_table, the new overclocking structure which is acpu_freq_tbl_oc. Please do check out this commit too - https://github.com/deedwar/android_...mmit/d5520b9701591ecec2a3d4e43435bb7980cfea80

abcdjdj said:
I don't know much about kernel programming but, yes those are the frequencies on the left side of the table. They are measured in kHz (kilo hertz). You must divide the number by 1000 to get the frequency in mHz and divide by 10^6 to get it in GHz. Usually overclocking means extending the array of structures along with the corresponding voltage values. But in our acpuclock-8x60.c file, there are multiple structures which have the frequency table and there is a function called :-
Code:
static __init struct clkctl_acpu_speed *select_freq_plan(void)
which decides which frequency table to chose. So basically there is a switch case block in that function which looks like this -
Code:
switch (pvs) {
case 0x0:
case 0x7:
acpu_freq_tbl =acpu_freq_tbl_1512mhz_slow;
pr_info("ACPU PVS: Slow\n");
break;
case 0x1:
acpu_freq_tbl = acpu_freq_tbl_1512mhz_nom;
pr_info("ACPU PVS: Nominal\n");
break;
case 0x3:
acpu_freq_tbl = acpu_freq_tbl_1512mhz_fast;
pr_info("ACPU PVS: Fast\n");
break;
default:
acpu_freq_tbl = acpu_freq_tbl_1512mhz_slow;
pr_warn("ACPU PVS: Unknown. Defaulting to slow.\n");
break;
}
Here depending on the variable pvs (unfortunately can't figure out what pvs is ), the frequency table is chosen. So we need to assign acpu_freq_table, the new overclocking structure which is acpu_freq_tbl_oc. Please do check out this commit too - https://github.com/deedwar/android_...mmit/d5520b9701591ecec2a3d4e43435bb7980cfea80
Click to expand...
Click to collapse
Don't go into coding much... just tell me that the frequency of any CPU is fixed or not?
How does the frequency and oscillations work as the CPU load is increased?

anikesh102 said:
Don't go into coding much... just tell me that the frequency of any CPU is fixed or not?
How does the frequency and oscillations work as the CPU load is increased?
Click to expand...
Click to collapse
Very sorry to tell you but dude, without learning programming not much can be done. Anyway, kindly give me link to the sources which you are using. I need to check some files in the sources. The github link will do.

abcdjdj said:
Very sorry to tell you but dude, without learning programming not much can be done. Anyway, kindly give me link to the sources which you are using. I need to check some files in the sources. The github link will do.
Click to expand...
Click to collapse
https://github.com/DooMLoRD/android_kernel_sony_msm8660
It's DoomLord's github i m studying it for now.

anikesh102 said:
https://github.com/DooMLoRD/android_kernel_sony_msm8660
It's DoomLord's github i m studying it for now.
Click to expand...
Click to collapse
Well the overclocking commit was authored 9 months ago by Doom so the kernel has overclocking support. The CPU frequency scaling depends on the governor which you use. That's all I know about the cpu frequency scaling. You can check this guide for more info on the different governors - http://forum.xda-developers.com/showthread.php?t=1856256

blank flash error - please help!!

**** Log buffer [000001] 2018-04-29_23:09:21 ****
[ 0.000] Opening device: \\.\COM9
[ 0.063] Detecting device
[ 0.078] ...cpu.id = 94 (0x5e)
[ 0.125] ...cpu.sn = 4273788185 (0xfebcd519)
[ 0.125] Opening singleimage
[ 0.531] Loading package
[ 0.609] ...filename = pkg.xml
[ 0.688] Loading programmer
[ 0.938] ...filename = programmer.elf
[ 0.938] Sending programmer
[ 1.142] ReadFile() failed, GetLastError()=0
[ 1.510] Unexpected command, expecting 3 or 18 or 4, got 1 instead.
[ 1.551] ERROR: sahara_download()->general error
[ 1.554] Check qboot_log.txt for more details
[ 1.593] Total time: 1.609s
[ 1.611]
[ 1.611] qboot version 3.85
[ 1.611]
[ 1.611] DEVICE {
[ 1.611] name = "\\.\COM9",
[ 1.611] flags = "0x64",
[ 1.611] addr = "0x62FD64",
[ 1.611] sahara.current_mode = "0",
[ 1.611] api.buffer = "0x28B6020",
[ 1.611] cpu.serial = "4273788185",
[ 1.611] cpu.id = "94",
[ 1.611] cpu.sv_sbl = "0",
[ 1.611] cpu.name = "MSM8998",
[ 1.611] storage.type = "UFS",
[ 1.611] sahara.programmer = "programmer.elf",
[ 1.611] api.bnr = "0x27F3E10",
[ 1.611] }
[ 1.611]
[ 1.611]
[ 1.611] Backup & Restore {
[ 1.611] num_entries = 0,
[ 1.611] restoring = "false",
[ 1.611] backup_error = "not started",
[ 1.611] restore_error = "not started",
[ 1.611] }
[ 1.611]
--------------
this is blank flash error log. I don't know this error. any solutions?

[Guide] Recovering from a hard brick

This guide aims to recover your G7 power from a hard brick that leaves it in emergency download (EDL) mode.
Will this work with my device?
This should work on any device in EDL mode. To check for this mode, first try entering fastboot by holding the power button and volume down at the same time. If the screen comes on, use this guide instead.
If your device can't enter fastboot, connect it to a computer using it's USB-c cable, and open device manager using the search bar. Scroll down to "Ports" and open it, then look for a device called "qualcomm hs-usb qdloader 9008". if it appears, you might just be in luck.
The fix
Recovering from this brick is quite a simple process, as a blank flash is available.
Connect your device to a computer
Download blankflash.zip from https://mega.nz/#!tVd1VaoZ!epk2yLEqnQBKEwT2QbQaOe8-4675pfj76Hs7pC5kbQE onto your computer, and extract it to it's own folder
Run "blank-flash.bat", and wait for it to finish
If you receive an error message like "ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error" on your computer, try holding the power button on your phone for about 10 seconds and trying again, or unplug and reconnect your phone.
After Running blank-flash.bat
From here, your phone should be able to start. If it enters recovery mode, boot loops or has other problems, but CAN now boot, follow this guide to reset your phone to stock, or you can use Lenovo smart assistant's recovery option.
Thanks to ChampC for finding the blankflash to make this recovery possible.

sluggedlemon said:
This guide aims to recover your G7 power from a hard brick that leaves it in emergency download (EDL) mode.
Will this work with my device?
This should work on any device in EDL mode. To check for this mode, first try entering fastboot by holding the power button and volume down at the same time. If the screen comes on, use this guide instead.
If your device can't enter fastboot, connect it to a computer using it's USB-c cable, and open device manager using the search bar. Scroll down to "Ports" and open it, then look for a device called "qualcomm hs-usb qdloader 9008". if it appears, you might just be in luck.
The fix
Recovering from this brick is quite simple, as a blank flash is available.
Connect your device to a computer
Download blankflash.zip from https://mega.nz/#!5NtCia6a!epk2yLEqn...fj76Hs7pC5kbQE onto your computer, and extract it to it's own folder
Run "blank-flash.bat", and wait for it to finish
If you receive an error message like "ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error" on your computer, try holding the power button on your phone for about 10 seconds and trying again, or unplug and reconnect your phone.
After Running blank-flash.bat
From here, your phone should be able to start. If it enters recovery mode, boot loops or has other problems, but CAN now boot, follow this guide to reset your phone to stock, or you can use Lenovo smart assistant's recovery option.
Thanks to ChampC for finding the blankflash to make this recovery possible.
Click to expand...
Click to collapse
Thank
Work XT1955-4.
:fingers-crossed::fingers-crossed::fingers-crossed:

Decryption Key
sluggedlemon said:
This guide aims to recover your G7 power from a hard brick that leaves it in emergency download (EDL) mode.
Will this work with my device?
This should work on any device in EDL mode. To check for this mode, first try entering fastboot by holding the power button and volume down at the same time. If the screen comes on, use this guide instead.
If your device can't enter fastboot, connect it to a computer using it's USB-c cable, and open device manager using the search bar. Scroll down to "Ports" and open it, then look for a device called "qualcomm hs-usb qdloader 9008". if it appears, you might just be in luck.
The fix
Recovering from this brick is quite simple, as a blank flash is available.
Connect your device to a computer
Download blankflash.zip from https://mega.nz/#!5NtCia6a!epk2yLEqn...fj76Hs7pC5kbQE onto your computer, and extract it to it's own folder
Run "blank-flash.bat", and wait for it to finish
If you receive an error message like "ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error" on your computer, try holding the power button on your phone for about 10 seconds and trying again, or unplug and reconnect your phone.
After Running blank-flash.bat
From here, your phone should be able to start. If it enters recovery mode, boot loops or has other problems, but CAN now boot, follow this guide to reset your phone to stock, or you can use Lenovo smart assistant's recovery option.
Thanks to ChampC for finding the blankflash to make this recovery possible.
Click to expand...
Click to collapse
What's the decyption key to download the file?

Romathon said:
What's the decyption key to download the file?
Click to expand...
Click to collapse
https://mega.nz/#!PHRD1KhI!epk2yLEqnQBKEwT2QbQaOe8-4675pfj76Hs7pC5kbQE
Sent from my Moto E (4) using Tapatalk

Romathon said:
What's the decyption key to download the file?
Click to expand...
Click to collapse
Seems like there was a problem with the link. Not sure why, as it should have been identical to the one I used to download it, but either way it's fixed now.

sluggedlemon said:
This guide aims to recover your G7 power from a hard brick that leaves it in emergency download (EDL) mode.
Will this work with my device?
This should work on any device in EDL mode. To check for this mode, first try entering fastboot by holding the power button and volume down at the same time. If the screen comes on, use this guide instead.
If your device can't enter fastboot, connect it to a computer using it's USB-c cable, and open device manager using the search bar. Scroll down to "Ports" and open it, then look for a device called "qualcomm hs-usb qdloader 9008". if it appears, you might just be in luck.
The fix
Recovering from this brick is quite simple, as a blank flash is available.
Connect your device to a computer
Download blankflash.zip from https://mega.nz/#!tVd1VaoZ!epk2yLEqnQBKEwT2QbQaOe8-4675pfj76Hs7pC5kbQE onto your computer, and extract it to it's own folder
Run "blank-flash.bat", and wait for it to finish
If you receive an error message like "ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error" on your computer, try holding the power button on your phone for about 10 seconds and trying again, or unplug and reconnect your phone.
After Running blank-flash.bat
From here, your phone should be able to start. If it enters recovery mode, boot loops or has other problems, but CAN now boot, follow this guide to reset your phone to stock, or you can use Lenovo smart assistant's recovery option.
Thanks to ChampC for finding the blankflash to make this recovery possible.
Click to expand...
Click to collapse
Another sucessfull resurrection of an 1955-4 Thanks a lot!!! You saved my life... i mean phone

Saved my phone.
Man....I never thought the universe would align for me to
A. Have my phone back after a failed TWRP flash. (Which in ten years I've never bricked a phone.) Thank you so very much for providing the blank flash needed to fix my phone. and B. I mounted a new tire to a rim I had to buy because mine was cracked so my car is also saved.
So thank you. So very very much.
p.s thanks for fixing the download link as well.

EDIT: I'm currently stuck here. This is what I get in the qboot_log:
**** Log buffer [000001] 2019-10-31_05:53:29 ****
[ 0.000] Opening device: \\.\COM3
[ 0.001] Detecting device
[ 4.004] ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error
[ 4.004] Check qboot_log.txt for more details
[ 4.004] Total time: 4.005s
[ 4.004]
[ 4.004] qboot version 3.40
[ 4.004]
[ 4.004] DEVICE {
[ 4.004] name = "\\.\COM3",
[ 4.004] flags = "0x64",
[ 4.004] addr = "0x61FE4C",
[ 4.004] api.bnr = "0xF92F20",
[ 4.004] }
[ 4.004]
[ 4.004]
[ 4.004] Backup & Restore {
[ 4.004] num_entries = 0,
[ 4.004] restoring = "false",
[ 4.004] backup_error = "not started",
[ 4.004] restore_error = "not started",
[ 4.004] }
[ 4.004]

disobey said:
EDIT: I'm currently stuck here. This is what I get in the qboot_log:
**** Log buffer [000001] 2019-10-31_05:53:29 ****
[ 0.000] Opening device: \\.\COM3
[ 0.001] Detecting device
[ 4.004] ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error
[ 4.004] Check qboot_log.txt for more details
[ 4.004] Total time: 4.005s
[ 4.004]
[ 4.004] qboot version 3.40
[ 4.004]
[ 4.004] DEVICE {
[ 4.004] name = "\\.\COM3",
[ 4.004] flags = "0x64",
[ 4.004] addr = "0x61FE4C",
[ 4.004] api.bnr = "0xF92F20",
[ 4.004] }
[ 4.004]
[ 4.004]
[ 4.004] Backup & Restore {
[ 4.004] num_entries = 0,
[ 4.004] restoring = "false",
[ 4.004] backup_error = "not started",
[ 4.004] restore_error = "not started",
[ 4.004] }
[ 4.004]
Click to expand...
Click to collapse
Blankflashes can be temperamental, try disconnecting your phone and holding the power button for 10 seconds to make sure it's off before retrying. I've also heard it can help if you run it quickly after reconnecting it, but I've never needed to.
-ps: sorry for not responding earlier

Hi, does this blank flash flash the bootloader from the unlocked varient so that I can flash the factory image from the unlocked version and relock the bootloader without loading a carrier bootloader?

gigawatt said:
Hi, does this blank flash flash the bootloader from the unlocked varient so that I can flash the factory image from the unlocked version and relock the bootloader without loading a carrier bootloader?
Click to expand...
Click to collapse
I believe that this is the unlocked version, but I don't have experience unlocking phones so I'm not sure if it's what you need.

Thank you in advance
Kindly need help with my phone since I tried for almost 5 hours (google/softwares/threads), but still no success.
I tried installing lineageos and I got a bootloop so silly me wiped everything in twrp and formatted data hoping to repeat the steps all over again and make it work. Now, I'm stuck in fastboot mode (no android logo on top), oem_locked, and barcode IMEI shows zeros. PS Fastboot commands won't work and it gives me (permission denied) every time. When I turn off the phone and plug the cable, fastboot mode comes up right in.
any idea whats going here, or any help with the matter is really appreciated

fawazed said:
Kindly need help with my phone since I tried for almost 5 hours (google/softwares/threads), but still no success.
I tried installing lineageos and I got a bootloop so silly me wiped everything in twrp and formatted data hoping to repeat the steps all over again and make it work. Now, I'm stuck in fastboot mode (no android logo on top), oem_locked, and barcode IMEI shows zeros. PS Fastboot commands won't work and it gives me (permission denied) every time. When I turn off the phone and plug the cable, fastboot mode comes up right in.
any idea whats going here, or any help with the matter is really appreciated
Click to expand...
Click to collapse
Try
Code:
fastboot oem blankflash
That should put the device into
Emergency download mode
Then you can follow instructions in post #1
Sent from my mata using XDA Labs

sd_shadow said:
Try
That should put the device into
Emergency download mode
Then you can follow instructions in post #1
Click to expand...
Click to collapse
Okay, will try that.. thank you :good:

sd_shadow said:
Try
Code:
fastboot oem blankflash
That should put the device into
Emergency download mode
Then you can follow instructions in post #1
Sent from my mata using XDA Labs
Click to expand...
Click to collapse
Thank you it worked now .. much appreciated :victory::good:
For those who might face issue of getting stuck on "waiting for devices" when running the bat file, try updating the moto/qualcomm drivers, and choosing the drivers manually in Device Manager.

Hey, thanks for the guide, but i'm currently stuck here :/
[ -0.000] Opening device: \\.\COM7
[ 0.001] Detecting device
[ 0.004] ...cpu.id = 186 (0xba)
[ 0.004] ...cpu.sn = 3785115971 (0xe19c4943)
[ 0.005] Opening singleimage
[ 0.006] Loading package
[ 0.009] ...filename = singleimage.pkg.xml
[ 0.011] Loading programmer
[ 0.012] ...filename = programmer.mbn
[ 0.012] Sending programmer
[ 0.299] Handling things over to programmer
[ 0.300] Identifying CPU version
[ 0.306] Waiting for firehose to get ready
[ 15.977] ReadFile() failed, GetLastError()=0
[ 15.977] ReadFile() failed, GetLastError()=0
[ 46.784] ReadFile() failed, GetLastError()=0
[ 46.785] ReadFile() failed, GetLastError()=0
[ 60.688] Waiting for firehose to get ready
[ 77.568] ReadFile() failed, GetLastError()=0
[ 77.569] ReadFile() failed, GetLastError()=0
[108.332] ReadFile() failed, GetLastError()=0
[108.332] ReadFile() failed, GetLastError()=0
[122.234] ...MSM8953 unknown
[122.234] Determining target secure state
[122.237] Waiting for firehose to get ready
[139.079] ReadFile() failed, GetLastError()=0
[139.080] ReadFile() failed, GetLastError()=0
[183.065] ...secure = no
[183.128] Initializing storage
[183.132] Waiting for firehose to get ready
[243.246] Configuring device...
[243.252] Waiting for firehose to get ready
[303.367] Waiting for firehose to get ready
[363.491] Waiting for firehose to get ready
[423.612] Waiting for firehose to get ready
[483.723] Initializing storage
[483.733] Waiting for firehose to get ready
[543.852] Configuring device...
[543.858] Waiting for firehose to get ready
[603.982] Waiting for firehose to get ready
[665.300] Waiting for firehose to get ready
[725.423] Waiting for firehose to get ready
[785.534] Waiting for firehose to get ready
[845.642] Configuring device...
[845.647] Waiting for firehose to get ready
[905.768] Waiting for firehose to get ready
[965.888] Waiting for firehose to get ready
[1026.004] Waiting for firehose to get ready
[1086.111] ERROR: do_package()->do_recipe()->do_configure()->buffer_read()->device_read()->IO error
[1086.111] Check qboot_log.txt for more details
[1086.115] Total time: 1086.117s
[1086.118] There were some hiccups in backup and restore.
[1086.120] Please save the following files and see a Bootloader member.
[1086.124] 1) ./qboot_log.txt
[1086.126] 2) ./backup_0xE19C4943_2019-11-14_223756.img
[1086.128]
[1086.132]
[1086.132] qboot version 3.40
[1086.132]
[1086.132] DEVICE {
[1086.132] name = "\\.\COM7",
[1086.132] flags = "0x64",
[1086.132] addr = "0x61FE5C",
[1086.132] sahara.current_mode = "0",
[1086.132] api.buffer = "0x124F020",
[1086.132] cpu.serial = "3785115971",
[1086.132] cpu.id = "186",
[1086.132] cpu.sv_sbl = "0",
[1086.132] cpu.name = "MSM8953",
[1086.132] storage.type = "eMMC",
[1086.132] sahara.programmer = "programmer.mbn",
[1086.132] module.firehose = "0x7DD7A0",
[1086.132] cpu.ver = "0",
[1086.132] cpu.vername = "unknown",
[1086.132] api.bnr = "0x6E83F8",
[1086.132] }
[1086.132]
[1086.132]
[1086.132] Backup & Restore {
[1086.132] num_entries = 27,
[1086.132] restoring = "false",
[1086.132] restore_error = "not started",
[1086.133] entries[00] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cid"},
[1086.133] entries[01] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="frp"},
[1086.133] entries[02] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="hw"},
[1086.133] entries[03] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="misc"},
[1086.133] entries[04] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="persist"},
[1086.133] entries[05] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="persist2"},
[1086.133] entries[06] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="utags"},
[1086.133] entries[07] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devinfo"},
[1086.133] entries[08] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sp"},
[1086.133] entries[09] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="aboot_a"},
[1086.133] entries[10] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib_a"},
[1086.133] entries[11] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib64_a"},
[1086.133] entries[12] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devcfg_a"},
[1086.133] entries[13] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="keymaster_a"},
[1086.133] entries[14] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="tz_a"},
[1086.133] entries[15] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="rpm_a"},
[1086.133] entries[16] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="prov_a"},
[1086.133] entries[17] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sbl1_a"},
[1086.133] entries[18] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="aboot_b"},
[1086.133] entries[19] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib_b"},
[1086.133] entries[20] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib64_b"},
[1086.133] entries[21] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devcfg_b"},
[1086.133] entries[22] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="keymaster_b"},
[1086.133] entries[23] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="tz_b"},
[1086.133] entries[24] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="rpm_b"},
[1086.133] entries[25] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="prov_b"},
[1086.133] entries[26] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sbl1_b"},
[1086.133] simg = {
[1086.133] filename = "backup_0xE19C4943_2019-11-14_223756.img",
[1086.133] entries[00] = { size = 405264, name = "programmer.mbn" },
[1086.133] }
[1086.133] }
[1086.133]

It doesn't seem to work for my XT1955-4.. I get that same error as other people. But I can't seem to restart my phone. I hold the power button hoping it will turn off, then when I connect it to laptop, it instantly pops up in the device manager.
Unbelievable how annoying it is to install custom stuff on this phone.
EDIT: I still had my SD card in it. After I removed it, it worked..

...
---------- Post added at 12:53 AM ---------- Previous post was at 12:52 AM ----------
Ballyeet said:
Hey, thanks for the guide, but i'm currently stuck here :/
[ -0.000] Opening device: \.\COM7
[ 0.001] Detecting device
[ 0.004] ...cpu.id = 186 (0xba)
[ 0.004] ...cpu.sn = 3785115971 (0xe19c4943)
[ 0.005] Opening singleimage
[ 0.006] Loading package
[ 0.009] ...filename = singleimage.pkg.xml
[ 0.011] Loading programmer
[ 0.012] ...filename = programmer.mbn
[ 0.012] Sending programmer
[ 0.299] Handling things over to programmer
[ 0.300] Identifying CPU version
[ 0.306] Waiting for firehose to get ready
[ 15.977] ReadFile() failed, GetLastError()=0
[ 15.977] ReadFile() failed, GetLastError()=0
[ 46.784] ReadFile() failed, GetLastError()=0
[ 46.785] ReadFile() failed, GetLastError()=0
[ 60.688] Waiting for firehose to get ready
[ 77.568] ReadFile() failed, GetLastError()=0
[ 77.569] ReadFile() failed, GetLastError()=0
[108.332] ReadFile() failed, GetLastError()=0
[108.332] ReadFile() failed, GetLastError()=0
[122.234] ...MSM8953 unknown
[122.234] Determining target secure state
[122.237] Waiting for firehose to get ready
[139.079] ReadFile() failed, GetLastError()=0
[139.080] ReadFile() failed, GetLastError()=0
[183.065] ...secure = no
[183.128] Initializing storage
[183.132] Waiting for firehose to get ready
[243.246] Configuring device...
[243.252] Waiting for firehose to get ready
[303.367] Waiting for firehose to get ready
[363.491] Waiting for firehose to get ready
[423.612] Waiting for firehose to get ready
[483.723] Initializing storage
[483.733] Waiting for firehose to get ready
[543.852] Configuring device...
[543.858] Waiting for firehose to get ready
[603.982] Waiting for firehose to get ready
[665.300] Waiting for firehose to get ready
[725.423] Waiting for firehose to get ready
[785.534] Waiting for firehose to get ready
[845.642] Configuring device...
[845.647] Waiting for firehose to get ready
[905.768] Waiting for firehose to get ready
[965.888] Waiting for firehose to get ready
[1026.004] Waiting for firehose to get ready
[1086.111] ERROR: do_package()->do_recipe()->do_configure()->buffer_read()->device_read()->IO error
[1086.111] Check qboot_log.txt for more details
[1086.115] Total time: 1086.117s
[1086.118] There were some hiccups in backup and restore.
[1086.120] Please save the following files and see a Bootloader member.
[1086.124] 1) ./qboot_log.txt
[1086.126] 2) ./backup_0xE19C4943_2019-11-14_223756.img
[1086.128]
[1086.132]
[1086.132] qboot version 3.40
[1086.132]
[1086.132] DEVICE {
[1086.132] name = "\.\COM7",
[1086.132] flags = "0x64",
[1086.132] addr = "0x61FE5C",
[1086.132] sahara.current_mode = "0",
[1086.132] api.buffer = "0x124F020",
[1086.132] cpu.serial = "3785115971",
[1086.132] cpu.id = "186",
[1086.132] cpu.sv_sbl = "0",
[1086.132] cpu.name = "MSM8953",
[1086.132] storage.type = "eMMC",
[1086.132] sahara.programmer = "programmer.mbn",
[1086.132] module.firehose = "0x7DD7A0",
[1086.132] cpu.ver = "0",
[1086.132] cpu.vername = "unknown",
[1086.132] api.bnr = "0x6E83F8",
[1086.132] }
[1086.132]
[1086.132]
[1086.132] Backup & Restore {
[1086.132] num_entries = 27,
[1086.132] restoring = "false",
[1086.132] restore_error = "not started",
[1086.133] entries[00] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cid"},
[1086.133] entries[01] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="frp"},
[1086.133] entries[02] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="hw"},
[1086.133] entries[03] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="misc"},
[1086.133] entries[04] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="persist"},
[1086.133] entries[05] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="persist2"},
[1086.133] entries[06] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="utags"},
[1086.133] entries[07] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devinfo"},
[1086.133] entries[08] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sp"},
[1086.133] entries[09] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="aboot_a"},
[1086.133] entries[10] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib_a"},
[1086.133] entries[11] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib64_a"},
[1086.133] entries[12] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devcfg_a"},
[1086.133] entries[13] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="keymaster_a"},
[1086.133] entries[14] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="tz_a"},
[1086.133] entries[15] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="rpm_a"},
[1086.133] entries[16] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="prov_a"},
[1086.133] entries[17] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sbl1_a"},
[1086.133] entries[18] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="aboot_b"},
[1086.133] entries[19] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib_b"},
[1086.133] entries[20] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib64_b"},
[1086.133] entries[21] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devcfg_b"},
[1086.133] entries[22] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="keymaster_b"},
[1086.133] entries[23] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="tz_b"},
[1086.133] entries[24] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="rpm_b"},
[1086.133] entries[25] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="prov_b"},
[1086.133] entries[26] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sbl1_b"},
[1086.133] simg = {
[1086.133] filename = "backup_0xE19C4943_2019-11-14_223756.img",
[1086.133] entries[00] = { size = 405264, name = "programmer.mbn" },
[1086.133] }
[1086.133] }
[1086.133]
Click to expand...
Click to collapse
I get same exactly as you do on my metro g7 power when running ./blank-flash.sh ??
Did you ever resolve this issue and get yours fixed or still bricked?
Sent from my OnePlus5 using XDA Labs

Update 2: Managed to get it to work this time! Just took a few attempts to run the BAT file successfully immediately after plugging in the device.
Update 1:
Swapped out for another USB cable and it started, but failed in the end. Here's the result:
**** Log buffer [000001] 2020-01-07_18:12:13 ****
[ -0.000] Opening device: \\.\COM3
[ 0.001] Detecting device
[ 0.004] ...cpu.id = 186 (0xba)
[ 0.004] ...cpu.sn = 3681404730 (0xdb6dc73a)
[ 0.004] Opening singleimage
[ 0.008] Loading package
[ 0.010] ...filename = singleimage.pkg.xml
[ 0.011] Loading programmer
[ 0.011] ...filename = programmer.mbn
[ 0.011] Sending programmer
[ 0.298] Handling things over to programmer
[ 0.298] Identifying CPU version
[ 0.299] Waiting for firehose to get ready
[ 60.395] Waiting for firehose to get ready
[120.486] ...MSM8953 unknown
[120.486] Determining target secure state
[120.488] Waiting for firehose to get ready
[180.577] ...secure = no
[180.595] Initializing storage
[180.598] Waiting for firehose to get ready
[240.694] Configuring device...
[240.694] Waiting for firehose to get ready
[300.785] Waiting for firehose to get ready
[360.878] Waiting for firehose to get ready
[420.968] Waiting for firehose to get ready
[481.058] Initializing storage
[481.060] Waiting for firehose to get ready
[541.154] Configuring device...
[541.155] Waiting for firehose to get ready
[601.251] Waiting for firehose to get ready
[661.345] Waiting for firehose to get ready
[721.432] Waiting for firehose to get ready
[781.525] Waiting for firehose to get ready
[841.616] Configuring device...
[841.617] Waiting for firehose to get ready
[901.781] Waiting for firehose to get ready
[961.864] Waiting for firehose to get ready
[1021.956] Waiting for firehose to get ready
[1082.044] ERROR: do_package()->do_recipe()->do_configure()->buffer_read()->device_read()->IO error
[1082.044] Check qboot_log.txt for more details
[1082.044] Total time: 1082.045s
[1082.045] There were some hiccups in backup and restore.
[1082.045] Please save the following files and see a Bootloader member.
[1082.046] 1) ./qboot_log.txt
[1082.046] 2) ./backup_0xDB6DC73A_2020-01-07_181513.img
[1082.046]
[1082.047]
[1082.047] qboot version 3.40
[1082.047]
[1082.047] DEVICE {
[1082.047] name = "\\.\COM3",
[1082.047] flags = "0x64",
[1082.047] addr = "0x61FE4C",
[1082.047] sahara.current_mode = "0",
[1082.047] api.buffer = "0x128D020",
[1082.047] cpu.serial = "3681404730",
[1082.047] cpu.id = "186",
[1082.047] cpu.sv_sbl = "0",
[1082.047] cpu.name = "MSM8953",
[1082.047] storage.type = "eMMC",
[1082.047] sahara.programmer = "programmer.mbn",
[1082.047] module.firehose = "0xF3D680",
[1082.047] cpu.ver = "0",
[1082.047] cpu.vername = "unknown",
[1082.047] api.bnr = "0xE47A40",
[1082.047] }
[1082.047]
[1082.047]
[1082.047] Backup & Restore {
[1082.047] num_entries = 27,
[1082.047] restoring = "false",
[1082.047] restore_error = "not started",
[1082.047] entries[00] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cid"},
[1082.047] entries[01] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="frp"},
[1082.047] entries[02] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="hw"},
[1082.047] entries[03] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="misc"},
[1082.047] entries[04] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="persist"},
[1082.047] entries[05] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="persist2"},
[1082.047] entries[06] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="utags"},
[1082.047] entries[07] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devinfo"},
[1082.047] entries[08] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sp"},
[1082.047] entries[09] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="aboot_a"},
[1082.047] entries[10] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib_a"},
[1082.047] entries[11] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib64_a"},
[1082.047] entries[12] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devcfg_a"},
[1082.047] entries[13] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="keymaster_a"},
[1082.047] entries[14] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="tz_a"},
[1082.047] entries[15] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="rpm_a"},
[1082.047] entries[16] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="prov_a"},
[1082.047] entries[17] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sbl1_a"},
[1082.047] entries[18] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="aboot_b"},
[1082.047] entries[19] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib_b"},
[1082.047] entries[20] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cmnlib64_b"},
[1082.047] entries[21] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="devcfg_b"},
[1082.047] entries[22] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="keymaster_b"},
[1082.047] entries[23] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="tz_b"},
[1082.047] entries[24] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="rpm_b"},
[1082.047] entries[25] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="prov_b"},
[1082.047] entries[26] = { skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="sbl1_b"},
[1082.047] simg = {
[1082.047] filename = "backup_0xDB6DC73A_2020-01-07_181513.img",
[1082.047] entries[00] = { size = 405264, name = "programmer.mbn" },
[1082.047] }
[1082.047] }
[1082.047]
Click to expand...
Click to collapse
--------------------------------------------------------------------------------------------------------------------------------------
Hi all,
I believe I hard bricked my phone when trying to install TWRP earlier today. I had just fastbooted the TWRP image and tried to install the TWRP zip but it did not succeed. I switched over to partition B and accidentally restarted and now it won't boot at all. Tried to use the solution here, but I keep getting the IO error.
**** Log buffer [000001] 2020-01-07_17:39:13 ****
[ -0.000] Opening device: \\.\COM4
[ 0.001] Detecting device
[ 4.008] ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error
[ 4.008] Check qboot_log.txt for more details
[ 4.008] Total time: 4.009s
[ 4.008]
[ 4.008] qboot version 3.40
[ 4.008]
[ 4.008] DEVICE {
[ 4.008] name = "\\.\COM4",
[ 4.008] flags = "0x64",
[ 4.008] addr = "0x61FE4C",
[ 4.008] api.bnr = "0xF12E28",
[ 4.008] }
[ 4.008]
[ 4.008]
[ 4.008] Backup & Restore {
[ 4.008] num_entries = 0,
[ 4.008] restoring = "false",
[ 4.008] backup_error = "not started",
[ 4.008] restore_error = "not started",
[ 4.008] }
[ 4.008]
Click to expand...
Click to collapse
Any ideas on what to try next?

This solution does not work on my XT1995-4
I just get errors about IO over and over, tried 3 different computers and 3 different USB C cables.
Motorola qboot utility version 3.40
[ 0.000] Opening device: /dev/ttyUSB0
[ 0.000] Detecting device
[ 0.004] ...cpu.id = 186 (0xba)
[ 0.004] ...cpu.sn = 802569542 (0x2fd63d46)
[ 0.004] Opening singleimage
[ 0.004] Loading package
[ 0.007] ...filename = singleimage.pkg.xml
[ 0.009] Loading programmer
[ 0.010] ...filename = programmer.mbn
[ 0.010] Sending programmer
[ 0.294] Handling things over to programmer
[ 0.294] Identifying CPU version
[ 0.298] Waiting for firehose to get ready
[ 3.308] ...MSM8953 1.0
[ 3.308] Determining target secure state
[ 3.311] ...secure = yes
[ 3.337] Configuring device...
[ 3.341] Flashing GPT...
[ 3.342] Flashing partition with gpt.bin
[ 3.345] Initializing storage
[ 5.090] Target NAK!
[ 5.090] ...num_partition_sectors=122142720
[ 5.090] ...SECTOR_SIZE_IN_BYTES=512
[ 5.090] ...MFR_ID=19
[ 5.090] ...{"storage_info": {"total_blocks":122142720, "block_size":512, "page_size":512, "num_physical":3, "mfr_id":19, "serial_num":221774116, "fw_version":"4","mem_type":"eMMC", "prod_name":"S0J9N8"}}
[ 5.090] ...XML (0 bytes) not validated
[ 5.090] ERROR: do_package()->do_recipe()->do_flash()->flash_simg()->do_package()->do_recipe()->do_flash()->gpt_flash()->get_storage()->init_storage()->firehose_do_fmt()->do_recipe()->NAK
[ 5.090] Check qboot_log.txt for more details
[ 5.090] Total time: 5.090s
FAILED: qb_flash_singleimage()->do_package()->do_recipe()->do_flash()->flash_simg()->do_package()->do_recipe()->do_flash()->gpt_flash()->get_storage()->init_storage()->firehose_do_fmt()->do_recipe()->NAK
Click to expand...
Click to collapse

Hard Brick moto g7 play xt1952-2

Hey guys, my moto g7 play xt1952-2, gave Hard Brick, screen does not turn on, no sign of life.
So I'm trying to use the template's blankflash, I found a website https://mirrors.lolinet.com/firmware/moto/channel/blankflash/
Only one passed the first process, which would be this blankflash_from_PDYS291.05-165-4
I start the process and it gives this error “[1363.531] ERROR: do_package()->do_recipe()->do_configure()->buffer_read()->device_read()->IO error”.
It creates a .img “./backup_0x5DBE9AC6_2021-05-28_174837.img” and a ./qboot_log.txt
./backup_0x5DBE9AC6_2021-05-28_174837.img download link if you need
backup_0x5DBE9AC6_2021-05-28_174837.img
drive.google.com
I don't know how to solve it
Someone help me.
i don't speak english, so i used google translator. there are probably errors in the translation
**** Log buffer [000001] 2021-05-28_17:41:03 ****
[ -0.000] Opening device: \\.\COM10
[ 0.009] Detecting device
[ 0.015] ...cpu.id = 186 (0xba)
[ 0.016] ...cpu.sn = 1572772550 (0x5dbe9ac6)
[ 0.016] Opening singleimage
[ 0.034] Loading package
[ 0.039] ...filename = singleimage.pkg.xml
[ 0.040] Loading programmer
[ 0.042] ...filename = programmer.mbn
[ 0.043] Sending programmer
[ 0.337] Handling things over to programmer
[ 0.338] Identifying CPU version
[ 0.344] Waiting for firehose to get ready
[ 61.277] Waiting for firehose to get ready
[121.907] ...MSM8953 unknown
[393.476] Determining target secure state
[393.478] Waiting for firehose to get ready
[454.115] ...secure = no
[454.147] Initializing storage
[454.150] Waiting for firehose to get ready
[514.741] Configuring device...
[514.743] Waiting for firehose to get ready
[575.371] Waiting for firehose to get ready
[635.988] Waiting for firehose to get ready
[696.611] Waiting for firehose to get ready
[757.187] Initializing storage
[757.189] Waiting for firehose to get ready
[817.829] Configuring device...
[817.831] Waiting for firehose to get ready
[878.424] Waiting for firehose to get ready
[939.035] Waiting for firehose to get ready
[999.700] Waiting for firehose to get ready
[1060.309] Waiting for firehose to get ready
[1121.004] Configuring device...
[1121.012] Waiting for firehose to get ready
[1181.602] Waiting for firehose to get ready
[1242.299] Waiting for firehose to get ready
[1302.919] Waiting for firehose to get ready
[1363.531] ERROR: do_package()->do_recipe()->do_configure()->buffer_read()->device_read()->IO error
[1363.531] Check qboot_log.txt for more details
[1363.536] Total time: 1363.538s
[1363.537] There were some hiccups in backup and restore.
[1363.539] Please save the following files and see a Bootloader member.
[1363.540] 1) ./qboot_log.txt
[1363.540] 2) ./backup_0x5DBE9AC6_2021-05-28_174837.img
[1363.541]
[1363.543]
[1363.543] qboot version 3.40
[1363.543]
[1363.543] DEVICE {
[1363.543] name = "\\.\COM10",
[1363.543] flags = "0x64",
[1363.543] addr = "0x61FE4C",
[1363.543] sahara.current_mode = "0",
[1363.543] api.buffer = "0x134B020",
[1363.543] cpu.serial = "1572772550",
[1363.543] cpu.id = "186",
[1363.543] cpu.sv_sbl = "0",
[1363.543] cpu.name = "MSM8953",
[1363.543] storage.type = "eMMC",
[1363.543] sahara.programmer = "programmer.mbn",
[1363.543] module.firehose = "0x7BEB28",
[1363.543] cpu.ver = "0",
[1363.543] cpu.vername = "unknown",
[1363.543] api.bnr = "0x12893F8",
[1363.543] }
[1363.543]
[1363.543]
[1363.543] Backup & Restore {
[1363.543] num_entries = 27,
[1363.543] restoring = "false",
[1363.543] restore_error = "not started",
[1363.543] entries[00] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="cid"},
[1363.543] entries[01] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="frp"},
[1363.543] entries[02] = { skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name ="hw"},
[1363.543] entradas [03] = {skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "misc"},
[1363.543] entradas [04] = {skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "persist"},
[1363.543] entradas [05] = {skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "persist2"},
[1363.543] entradas [06] = {skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "utags"},
[1363.543] entradas [07] = {skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "devinfo"},
[1363.543] entradas [08] = {skipped = 0, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "sp"},
[1363.543] entradas [09] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "aboot_a"},
[1363.543] entradas [10] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "cmnlib_a"},
[1363.543] entradas [11] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "cmnlib64_a"},
[1363.543] entradas [12] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "devcfg_a"},
[1363.543] entradas [13] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "keymaster_a"},
[1363.543] entradas [14] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "tz_a"},
[1363.543] entradas [15] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "rpm_a"},
[1363.543] entradas [16] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "prov_a"},
[1363.543] entradas [17] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "sbl1_a"},
[1363.543] entradas [18] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "aboot_b"},
[1363.543] entradas [19] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "cmnlib_b"},
[1363.543] entradas [20] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "cmnlib64_b"},
[1363.543] entradas [21] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "devcfg_b"},
[1363.543] entradas [22] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "keymaster_b"},
[1363.543] entradas [23] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "tz_b"},
[1363.543] entradas [24] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "rpm_b"},
[1363.543] entradas [25] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "prov_b"},
[1363.543] entradas [26] = {skipped = 1, backup_tried = 0, backup_failed = 0, restore_tried = 0, restore_failed = 0, name = "sbl1_b"},
[1363.543] simg = {
[1363.543] filename = "backup_0x5DBE9AC6_2021-05-28_174837.img",
[1363.543] entradas [00] = {size = 405264, name = "programmer.mbn"},
[1363.543]}
[1363.543]}
[1363.543]