[Android Software/Hacking General [Developers Only]] Jackie393:
Hi every one!

I have idea downgrade Fire TV OS via hardware (eMMC)

[IMG="Fire TV Gen 2"]https://i.imgur.com/uWHalTu.jpg[/IMG]

My Fire TV Gen 2 running on Fire TV OS version 5.2.6.1. it can't root. i desolder eMMC and connect to Linux PC use Transcend USB 3.0 with SD Card Adaptor

Now i can see all partition layout via command :

- to see partition :

[COLOR="red"] - need on first time and enter your password[/COLOR]

sudo su
fdisk /dev/sda
enter "x" then enter "p"

or open Gparted to see

- to export and backup partition layout:

fdisk /dev/sda
Enter "O"
Enter name
Enter "q" to quit

Now i can dump all partition use command :

dd if=/dev/sda1 of=/home/duong/Desktop/dump/1PRO_INFO.bin
dd if=/dev/sda2 of=/home/duong/Desktop/dump/2NVRAM.bin
dd if=/dev/sda3 of=/home/duong/Desktop/dump/3TEE1.bin
dd if=/dev/sda4 of=/home/duong/Desktop/dump/4TEE2.bin
dd if=/dev/sda5 of=/home/duong/Desktop/dump/5lk.bin
dd if=/dev/sda6 of=/home/duong/Desktop/dump/6boot.img
dd if=/dev/sda7 of=/home/duong/Desktop/dump/7recovery.img
dd if=/dev/sda8 of=/home/duong/Desktop/dump/8KB.bin
dd if=/dev/sda9 of=/home/duong/Desktop/dump/9DKB.bin
dd if=/dev/sda10 of=/home/duong/Desktop/dump/10MISC.bin
dd if=/dev/sda11 of=/home/duong/Desktop/dump/11LOGO.bin
dd if=/dev/sda12 of=/home/duong/Desktop/dump/12EXPDB.bin
dd if=/dev/sda13 of=/home/duong/Desktop/dump/13system.img status=progress
dd if=/dev/sda14 of=/home/duong/Desktop/dump/14cache.img status=progress
dd if=/dev/sda15 of=/home/duong/Desktop/dump/15userdata.img status=progress

I try mount system and edit them use comand :

[COLOR="red"]- make folder "system" to root path :[/COLOR]

cd /
mkdir system

[COLOR="red"]- mount system :[/COLOR]

mount -o loop /home/duong/Desktop/dump/13system.img /system

[COLOR="Red"]- mount system to rw for modify:[/COLOR]

mount -o remount,rw /system

[COLOR="Red"]- mount system to ro:[/COLOR]

mount -o remount,ro /system

i try modify something "put manual su, supolicy" to path /system/xbin symlink "daemonsu" to "su"

put "libsupol.so" to path "/system/lib64" and remount system ro, unmount system

I can write all partition to eMMC use command:

dd if=/home/duong/Desktop/dump/1PRO_INFO.bin of=/dev/sda1
dd if=/home/duong/Desktop/dump/2NVRAM.bin of=/dev/sda2
dd if=/home/duong/Desktop/dump/3TEE1.bin of=/dev/sda3
dd if=/home/duong/Desktop/dump/4TEE2.bin of=/dev/sda4
dd if=/home/duong/Desktop/dump/5lk.bin of=/dev/sda5
dd if=/home/duong/Desktop/dump/6boot.img of=/dev/sda6
dd if=/home/duong/Desktop/dump/7recovery.img of=/dev/sda7
dd if=/home/duong/Desktop/dump/8KB.bin of=/dev/sda8
dd if=/home/duong/Desktop/dump/9DKB.bin of=/dev/sda9
dd if=/home/duong/Desktop/dump/10MISC.bin of=/dev/sda10
dd if=/home/duong/Desktop/dump/11LOGO.bin of=/dev/sda11
dd if=/home/duong/Desktop/dump/12EXPDB.bin of=/dev/sda12
dd if=/home/duong/Desktop/dump/13system.img of=/dev/sda13 status=progress
dd if=/home/duong/Desktop/dump/14cache.img of=/dev/sda14 status=progress
dd if=/home/duong/Desktop/dump/15userdata.img of=/dev/sda15 status=progress

i solder eMMC to board but not root

I believe if your device has been root and your share all dump partition, i can downgrade Fire TV OS to old version and root it :o:o

What do you think about this?

Anyone can dump and share all file? (your device need root and running on old version OS)

I will try it. thank

Sorry my English