Windows RT 8.0 Recovery Environment Jailbreak - Windows RT Development and Hacking

This is a version of the 8.0 jailbreak that will run in the recovery environment. This is meant more for developers than end-users.
It does not force a two minute wait at the start, but that is still required.
As always, it was developed for a Surface RT. Vivo tabs, etc..., your mileage may vary. I developed it targeting the Windows RT 8.0 image that MS uploaded after the 8.1 upgrade issues. I don't know if this varies from the stock image, I don't have it anymore.
I'm also curious as to if it'll run on a Surface 2 in the recovery environment. If anyone can test, I'd be grateful.
The trick to getting cdb and whatnot to run was plugging in valid certificate catalogs for cdb (and some other tools).
It also doesn't work with the side volume keys, though it does work with the volume keys on my Type 2 keyboard.

I think you need to add an batch file to download the symbol. The preloaded one may not work on some other tablets.

LolitaPlus said:
I think you need to add an batch file to download the symbol. The preloaded one may not work on some other tablets.
Click to expand...
Click to collapse
There is no Internet in recovery mode. If you can send me aystem32\ntkrnlmp.exe and system32\ci.dll for your recovery I can add them.

netham45 said:
There is no Internet in recovery mode. If you can send me aystem32\ntkrnlmp.exe and system32\ci.dll for your recovery I can add them.
Click to expand...
Click to collapse
However you can run it under normal Windows RT environment, don't you? I know there is no internet so I said it should be in another file.

LolitaPlus said:
However you can run it under normal Windows RT environment, don't you? I know there is no internet so I said it should be in another file.
Click to expand...
Click to collapse
You can't get at the recovery files easily from a full system either.

netham45 said:
It also doesn't work with the side volume keys, though it does work with the volume keys on my Type 2 keyboard.
Click to expand...
Click to collapse
So, seriously, that was my mistake. I only try to use side volume key. And I delete all my work for recovery jailbreak yesterday. Want to cry now. :crying:
Thank for your work, again.
netham45 said:
There is no Internet in recovery mode. If you can send me aystem32\ntkrnlmp.exe and system32\ci.dll for your recovery I can add them.
Click to expand...
Click to collapse
Is there anyway I can done it myself?

LolitaPlus said:
However you can run it under normal Windows RT environment, don't you? I know there is no internet so I said it should be in another file.
Click to expand...
Click to collapse
I get what you're saying, misread your other post. I don't have my device in a bootable state right now, but once I get it fixed up I'll make a .bat you can run to dump the PDBs for the other kernels.

hisoft said:
So, seriously, that was my mistake. I only try to use side volume key. And I delete all my work for recovery jailbreak yesterday. Want to cry now. :crying:
Click to expand...
Click to collapse
That really stinks. Sorry for your loss.
Assuming we have a way to run unsigned code, does anyone have a way to perform raw reads of a block device? I don't think there's any way to do it with managed code, and my development skills only extend a little into that. I figure there should be a way to compile C++ for ARM though. It might help you recover some of what you lost.
Also, it might help us get deleted files off system partitions. A few of us got lucky in getting Vivotab RTs that didn't have signing files deleted. If we could boot from a USB stick and undelete them, then just about everyone could have them...

nice work and a useful way to boot an RT8.1 system into an 8.0RT RE + jailbreak system
I had to get the correct symbols for my Sept 2012 kernel
You have to unlock the os drive if system has a Live account and it is Bitlockered
I usually skip that and run a batch file
manage-bde -unlock c: -recoverypassword xxxxxx-...
WindowsRE RT8.0
doesn't have a full windows environment or full win32 api (obviously) and no network (so far)
but can run many unsigned RT desktop apps
eg
putty
Strangely it can't run RT8.1 standard OS utilities -- must be some version number etc in the header it doesn't like
I might look into a way to dual boot it from HD (rather than booting from a USB) in due course

This is awsome! Been waiting for some update on something about RT jailbreaking even though it's in a RE environment.

Related

Splash Screen tool to create rgb565 images from any image

Hey guys, here's a .NET application that lets you convert any image into a proper 320x480xR5G6B5 image. Similar to the rgb2565 tool, but it handles all resizing, centering, and color conversion for you. It also let's you preview the image.
If you have Mono, this application should work in Linux/Mac as well.
Source code and binaries can be found here: http://www.koushikdutta.com/2008/12/quick-and-dirty-converter-tool-to.html
Awesome. The whole process is such a pain to do at the moment, hopefully this will simplify it a bit
Koush said:
Hey guys, here's a Windows tool that lets you convert any image into a proper 320x480xR5G6B5 image. Similar to Stericson's rgb565 tool, but it handles all resizing, centering, and color conversion for you. It also let's you preview the image.
Source code and binaries attached. I'm looking into compiling a fastboot tool for Windows.
Click to expand...
Click to collapse
Koush, let me know how the fastboot thing goes. I was actually able to get a fastboot.exe to compile using cygwin... but it just doesn't work . I never could get it to see the device. I didn't really look into it too much after that though.
Also, thanks for the RGB565 tool. That makes it a lot easier
Great going Koush! I really hope you get the fastboot working! I also tried and failed hooribly If you do get it working it would simplify the process alot!
Stericson
Stericson said:
Great going Koush! I really hope you get the fastboot working! I also tried and failed hooribly If you do get it working it would simplify the process alot!
Stericson
Click to expand...
Click to collapse
Yeah I'm actually primarily a Windows user. But luckily VMWare is pretty awesome, and I can do everything in there that I need to do, including flashing a real phone using fastboot!
More instructions here:
http://www.koushikdutta.com/2008/10/developing-and-debugging-android.html
You guys used Cygwin? When you say it didn't work, what do you mean? Crash or no effect? I was thinking about trying to just port it into Visual Studio rather than try to use Cygwin within the Android build environment. I don't think there are that many dependencies for that to really be a problem.
heck yeah koushie!
this will eventually make pushing the custom boot image so much easier for us windows users. nice...
(stericson, you still rock),
hbguy
Koush said:
You guys used Cygwin? When you say it didn't work, what do you mean? Crash or no effect? I was thinking about trying to just port it into Visual Studio rather than try to use Cygwin within the Android build environment. I don't think there are that many dependencies for that to really be a problem.
Click to expand...
Click to collapse
Yeah, the fastboot.exe just won't see the device. It runs, and if you don't provide arguments it will output the usage, but fastboot devices won't show the phone. I didn't try to debug the exe to troubleshoot exactly why it didn't work though. I may do that sometime this week, since I'll have a lot of free time .
If you want a copy of the (non-working) exe, just let me know.
JesusFreke said:
Yeah, the fastboot.exe just won't see the device. It runs, and if you don't provide arguments it will output the usage, but fastboot devices won't show the phone. I didn't try to debug the exe to troubleshoot exactly why it didn't work though. I may do that sometime this week, since I'll have a lot of free time .
If you want a copy of the (non-working) exe, just let me know.
Click to expand...
Click to collapse
Haven't had time to delve into this yet, but I think to do driver level stuff without a proper cert, you need to put your system into a test mode? Maybe similar to the Android x64 drivers that are unsigned?
See here: fastboot binary for windows
i can't seem to compile this tool on mac using mono.
i get an error that the type name space name windows does not exist in the name space system

[MOD]One Click Root and custom recovery

This one click root is only for windows. Make sure to enable usb debugging, then simply extract, then click on root tool sharp program. Once up, just click on the root button, press yes if windows asks you if it is ok to run this program, and soon enough your og droid will have rz recovery, and full root. This works on all froyo builds, including frk76. It does not work on eclair. Do not use this if you already have root, or are running a custom rom simply because you do not have to.
Should have put this here a long time ago. This will NOT work, if you do not have a sd card inserted and working properly on your device:good:
OG droid oneclick V1.0#: http://dl.dropbox.com/u/46535328/droid_oneclick_sharp.zip
Please give feedback, and if this program helps you, then please press the thanks button
Disclaimer: I can not be held responsible for any negative side affects this program causes
Thanks: motocache1,Cyanogenmod, ChainsDD, and raidzero.
If this program does not work for you, you may need to go download .net 4.0 redistributables from microsoft, and/or the motorola drivers.
the root tool app doesnt open any ideas? im running windows 7
joey.gunnarson said:
the root tool app doesnt open any ideas? im running windows 7
Click to expand...
Click to collapse
Yeah, there is a c++ redistributable error. I will fix this and get a new version up in a while. I will have to rewrite in c#, which means my extra features will be gone for now, but one click will still be there.
Wow...That was SUPER EZ!!! Thanks has been GIVEN!!!!b You guys are AWESOME!!!!
rootfan said:
Yeah, there is a c++ redistributable error. I will fix this and get a new version up in a while. I will have to rewrite in c#, which means my extra features will be gone for now, but one click will still be there.
Click to expand...
Click to collapse
So is this a windows 7 problem or something wrong with the method itself?
If I root my og droid will it speed up at all?
well you can overclock, flash new roms, and flash different kernals so yes you can speed it up.
and does this link work as is?
i know what i'm doing with tbolt but clueless with droid.
recDNA said:
and does this link work as is?
i know what i'm doing with tbolt but clueless with droid.
Click to expand...
Click to collapse
The link does work as is, but only for windows operating systems. If you choose to install kernels using rzrecovery which my program installs , then your droid will have major speed improvments.
If you have any problems with the procedure then read the op, and make sure to thank me
windows 7 too?
recDNA said:
windows 7 too?
Click to expand...
Click to collapse
xp, vista and windows seven will all work perfectly
Sleep 300 was kinda stupid but the script works!
It made my Nod32 go nuts though, so if you're getting "this is a virus" from your software, you'll have to disable that before downloading, unzipping and using then re-enable it afterward.
I have no idea what you're talking about?
recDNA said:
I have no idea what you're talking about?
Click to expand...
Click to collapse
Line 10 in the root script:
adb shell "./data/local/tmp/rageagainstthecage & sleep 300;kill $!"
It hangs for like 5 minutes. I got a laugh out of it. And there are no virus' on the download, my stupid anti-virus thought there was so I was just letting people know it's safe, even if their software says it isn't.
why is sleep 300 there?
rootfan said:
This one click root is only for windows. Make sure to enable usb debugging, then simply extract, then click on root tool sharp program. Once up, just click on the root button, press yes if windows asks you if it is ok to run this program, and soon enough your og droid will have rz recovery, and full root. This works on all froyo builds, including frk76. It does not work on eclair. Do not use this if you already have root, or are running a custom rom simply because you do not have to.
OG droid oneclick V1.0#: http://dl.dropbox.com/u/46535328/droid_oneclick_sharp.zip
Please give feedback, and if this program helps you, then please press the thanks button
Disclaimer: I can not be held responsible for any negative side affects this program causes
Thanks: motocache1,Cyanogenmod, ChainsDD, and raidzero.
If this program does not work for you, you may need to go download .net 4.0 redistributables from microsoft, and/or the motorola drivers.
Click to expand...
Click to collapse
well, not sure what I'm doing wrong but here is my experience:
OG Droid 2.2.3 (build FRK76). Attached to computer with usb debugging on in charge only mode. Run root tool sharp.exe, one click root box opens. Click on the 'Root' button and the cmd prmt window pops up and runs some scripts. It hang on line 10 for about 5 mins, blazes through the rest of the script (too fast for me to read what it's doing), closes itself and reboots my phone. when the phone reboots i do not have SU installed. I'm running Windows 7 (64bit) if that matters. Please let me know if i'm missing a step or doing something wrong.
thanks in advance.
i'm having the same issue as the guy above.. seems to be issues with the chmod777 part for me.. mostly the "rageagainstthecage" file doesn't seem to push or activate right, then adb can't find it..
Any Tips?
i'm in USB debug mode.. i have an sd card in.. i have the USB drivers from moto..
For anyone with problems make sure your sdcard is inserted and indeed working properly Make sure it isnt to full eaither. If you have a screen lock set up, make sure to unlock your phone before performing this process. should work after that.
i know this sounds stupid but this recovery will work on all roms?¿ and how do i enter into the recovery?¿ sryy my bad english am from dominican republic
htc s620 said:
i know this sounds stupid but this recovery will work on all roms?¿ and how do i enter into the recovery?¿ sryy my bad english am from dominican republic
Click to expand...
Click to collapse
The recovery will work on all roms just make sure to wipe before install
You can get into recovery by holding the x button on the physical keyboard and the power button.
Sent from my SCH-I535 using xda premium

[UPDATED, DUMPED!] I have an HTC 8X engineering unit! Check this out devs

The dump will be online soon, special thanks to the members who helped me get the dump! Without the help of them I wouldn't have do this.
I wanna thank these guys and to all who have posted here..
biktor_gj
Jaxbot
E:V:A
Cotulla
and especially rob243 who will host the dump for the developers to download.
I hope Windows Phone users will benefit to this!
Please check back here in a few days for the dump.
Meanwhile, the engineering HTC 8X loaner device will have to go back to the company soon, too. I would appreciate a little donation from the generous ones out there. Buy me a pizza? Buy me my own 8X? Just hit the donate to me button on the left under my username, or here.
Thanks all!
neilgoco said:
I got one with tons of apps that seems to be for testing. Maybe somehow this will help in the future development of the device? I am not sure how though.
Click to expand...
Click to collapse
Lucky you, check the hspl/spl to see if it's locked or unlocked. If unlocked, contact the user, I mean The Living Legend called COTULLA and tell him about your phone. Actually, just contact him, he will tell you to do a few things and if someone can help in here, it's him. We owe him the HSPL for HTC WP7 1st and 2nd generation phones and the 1st Titan custom rom (DFT) among other things.
Thanks for sharing!
f.
forelli said:
Lucky you, check the hspl/spl to see if it's locked or unlocked. If unlocked, contact the user, I mean The Living Legend called COTULLA and tell him about your phone. Actually, just contact him, he will tell you to do a few things and if someone can help in here, it's him. We owe him the HSPL for HTC WP7 1st and 2nd generation phones and the 1st Titan custom rom (DFT) among other things.
Thanks for sharing!
f.
Click to expand...
Click to collapse
Okay, how do I check that? Here are the apps installed, aside from the normal ones.
AudioPathSwitch
AutoCountCharge
AutoCountHeadset
CameraAutoFocus
CameraTestTool
DebugFlagEdit
eMMCTool
GCFSettings
HTCLogUploadStatus
NFCTool
PPT7Extension
StorageFullTool
TestSuite
USBModeSwitch
User Trial Feedback
WiFiTool
WirelessTool
WPRControl
zAccCalibrationApp
zAdventureWorks
zAllThingShell
zAppPurchaseHistory
zBattInfo
zBingSuggestsTestApp
zCafeApp
zCasey's Coffee
zDebugMenu
zEpdDiscoverySettings
zFiddlerClient
zGestureBester
zIE Optimization
zLocation Diagnostic App
zManaged Maps
zMarbleMaze
zProximityTestApp
zSensorView
zSystemInfo
zTicTapToe
zUpdate
zUsbFnBusMenu
zWiFiCSSettings
zWPPerf
zWPRedApp
what is the ROM version installed on the device?
Cotulla said:
what is the ROM version installed on the device?
Click to expand...
Click to collapse
Check these screenshots, especially the 3rd one.
okay, from the app titles and about phone screenshots- this is most definitely an engineering/test unit. bootloader entry built into the OS? wp bld lab? how did you come across this gem?
nothingsfactory said:
okay, from the app titles and about phone screenshots- this is most definitely an engineering/test unit. bootloader entry built into the OS? wp bld lab? how did you come across this gem?
Click to expand...
Click to collapse
[REDACTED FOR PRIVACY REASONS]
By the way, I am not sure if it's right to tap the Enter Bootloader button, I'm scared! LMAO
You do realize that this can help developers reverse engineer windows phone 8 right?
mcosmin222 said:
You do realize that this can help developers reverse engineer windows phone 8 right?
Click to expand...
Click to collapse
I do, that's why I created this thread so I can help somehow, even by a bit.
EDIT: I found a setting that lets me developer lock/unlock the device (even without registration). If you want me to test or run apps that will help you guys let me know.
EDIT 2: I tried tapping the Enter Bootloader option but it does nothing. Maybe I am doing it wrong?
neilgoco said:
I do, that's why I created this thread so I can help somehow, even by a bit.
EDIT: I found a setting that lets me developer lock/unlock the device (even without registration). If you want me to test or run apps that will help you guys let me know.
EDIT 2: I tried tapping the Enter Bootloader option but it does nothing. Maybe I am doing it wrong?
Click to expand...
Click to collapse
You can try holding down Vol Up, camera, and power, or Vol Down, camera, and power to get to the bootloader.
Is there a way to access the file system?
Jaxbot said:
You can try holding down Vol Up, camera, and power, or Vol Down, camera, and power to get to the bootloader.
Is there a way to access the file system?
Click to expand...
Click to collapse
I tried doing the volume down, camera, and power combination and it displayed something like a BIOS screen very quickly, around 1-2 seconds and then continues to boot up. I only managed to read the 1st line which says 'Security Unlocked' or something. I'll try take a photo.
EDIT 2: Regarding the file system access, I found these on the phone. Will any of these help?
[REDACTED FOR PRIVACY REASONS]
neilgoco said:
I tried doing the volume down, camera, and power combination and it displayed something like a BIOS screen very quickly, around 1-2 seconds and then continues to boot up. I only managed to read the 1st line which says 'Security Unlocked' or something. I'll try take a photo.
EDIT: Here's a rather blurry shot. :S
EDIT 2: Regarding the file system access, I found these on the phone. Will any of these help?
Click to expand...
Click to collapse
Security Unlocked probably means UEFI is off, or otherwise the bootloader is unlocked. Could be very wrong on that, though. Either way, doesn't matter since we don't have a 8X ROM to cook and modify.
Jaxbot said:
Security Unlocked probably means UEFI is off, or otherwise the bootloader is unlocked. Could be very wrong on that, though. Either way, doesn't matter since we don't have a 8X ROM to cook and modify.
Click to expand...
Click to collapse
JK. http://www.xda-developers.com/windows_phone/say-hello-to-wp8-htc-8x-ruu-leaked/
This is so very serious and huge news...if it has the UEFI unlocked like an ES is supposed to be. Can you access the file system/mount device in bootloader mode?
Also, could you try and install a WP7.* xap file ( just download an app/game xap from xda or this one from here, not a sys messing one) on it? Just copy it inside phone's int meme and click on it, the installer ''should" handle the xap...
BTW,if tha XAP installs and runs I could say that phone is worth its weight in gold...cough...cough...for us and MS.
htc9420 said:
This is so very serious and huge news...if it has the UEFI unlocked like an ES is supposed to be. Can you access the file system/mount device in bootloader mode?
Also, could you try and install a WP7.* xap file ( just download an app/game xap from xda or this one from here, not a sys messing one) on it? Just copy it inside phone's int meme and click on it, the installer ''should" handle the xap...
BTW,if tha XAP installs and runs I could say that phone is worth its weight in gold...cough...cough...for us and MS.
Click to expand...
Click to collapse
Can you access the file system/mount device in bootloader mode?
I cannot enter the bootloader mode, when I press volume down, camera, and power button it just shows the (I'll call it the...) BIOS screen very quickly, and then continues to boot up. Are there any other ways to access the file system?
Also, could you try and install a WP7.* xap file on it?
I'll try later. And what do you mean by "Just copy it inside phone's int meme and click on it, the installer ''should" handle the xap..."
neilgoco said:
Can you access the file system/mount device in bootloader mode?
I cannot enter the bootloader mode, when I press volume down, camera, and power button it just shows the (I'll call it the...) BIOS screen very quickly, and then continues to boot up. Are there any other ways to access the file system?
Click to expand...
Click to collapse
Maybe it's a combination of only two buttons....or maybe there's an app for that
neilgoco said:
Also, could you try and install a WP7.* xap file on it?
I'll try later. And what do you mean by "Just copy it inside phone's int meme and click on it, the installer ''should" handle the xap..."
Click to expand...
Click to collapse
Email it to you as an attachment and try to open it on the phone.
Also, depending on your time and availability, you could contact E:V:A by PM or posting in this thread http://forum.xda-developers.com/showthread.php?t=1934388 so you could dump whatever is on that phone.
Wow, this is real HW porn! I posted partition dump instructions in that thread, but I now see that this could be even more useful in the future, for allowing us to have unlocked bootloaders with all engineering features intact. So if you could somehow get us, either a full "disk image" or preferably all of the individual partitions, that would be awesome!
All the tools needed can be found in the links of my footer. It could be that you need to install some additional USB drivers as well.. But we'll see.
E:V:A said:
Wow, this is real HW porn! I posted partition dump instructions in that thread, but I now see that this could be even more useful in the future, for allowing us to have unlocked bootloaders with all engineering features intact. So if you could somehow get us, either a full "disk image" or preferably all of the individual partitions, that would be awesome!
All the tools needed can be found in the links of my footer. It could be that you need to install some additional USB drivers as well.. But we'll see.
Click to expand...
Click to collapse
My brains! Is it possible to do that via TeamViewer or something like that? So you would control my PC?
EDIT: I got into the 'bootloader mode' (not sure if it is). I plugged it into my notebook and it installed Windows Mobile Device Center (forgot the exact name lol) and the 'Serial' mode changed into 'USB'. ?
[REDACTED FOR PRIVACY REASONS]
neilgoco said:
My brains! Is it possible to do that via TeamViewer or something like that? So you would control my PC?
Click to expand...
Click to collapse
It's not that hard and it can't be done via remote support unless you have two machines ( you need one running linux and the other one with a IM that has video also). Your best shot is to find a friend that knows Linux and has a Linux distro installed and "beg" him to do it for you.
Also, it would be wise to keep secret the rest of the info about the device. It's been known that MS roams XDA and this thread isn't good news for them, just let me put this in another way : it's like you've got a WIN8 key generator in your hands ( though this is not a solution to activate W8). Stick to PM the devs.
Gracias
More finds. I pressed camera, volume UP, and power. Got this on Windows.
CHECK FIRST PAGE. =)

Need a Microsoft Surface RT Recovery

Hi all, I have completely screwed my surface rt last night.
I was trying to do a reset and it wasn't working then I tried a bunch of other things ive read on the forum and my surface wont even boot up. its just in a constant loop ive trying to do an automatic repair and diagnosing and keeps bringing me to the boot menu.
I made a recovery usb but it doesn't seem to be working so im assuming the OS was already corrupt hence the reason the reset option in "change pc settings" wasn't working.
I would really love if someone could upload a recovery image of their surface rt. I cannot find one any where and the ones I have found they have pulled the links down.
hope someone can help me out here.
cheers.
adam_4049 said:
Hi all, I have completely screwed my surface rt last night.
I was trying to do a reset and it wasn't working then I tried a bunch of other things ive read on the forum and my surface wont even boot up. its just in a constant loop ive trying to do an automatic repair and diagnosing and keeps bringing me to the boot menu.
I made a recovery usb but it doesn't seem to be working so im assuming the OS was already corrupt hence the reason the reset option in "change pc settings" wasn't working.
I would really love if someone could upload a recovery image of their surface rt. I cannot find one any where and the ones I have found they have pulled the links down.
hope someone can help me out here.
cheers.
Click to expand...
Click to collapse
Next time do a search. You would have found a thread on this. And, as was said in the aforementioned thread these recoveries are device specific, so even if I got mine to you, it wouldn't work for you. Take it to Microsoft and have them replace it.
C-Lang said:
Next time do a search. You would have found a thread on this. And, as was said in the aforementioned thread these recoveries are device specific, so even if I got mine to you, it wouldn't work for you. Take it to Microsoft and have them replace it.
Click to expand...
Click to collapse
i did do a search and nothing has been able to help me so far. i also did read that it is device specific but have also read it has worked for some people. unfortunatley in australia we do no have any microsoft stores so its not that easy to just take it somewhere.
I feel like there are files missing from c drive. Almost like it started to do a restore then stopped halfway. In which I have never been able to get it to that stage for that to be the case.
I did some reading and was able to find the recover partition and tried to run the install.wim file from which I understand to basically be the “OS”. When I try to run it it says “no such interface supported”
From what I understand there is just no way to do a fresh install on these things regardless of what the problem is which is disappointing on Microsoft’s behalf.
C-Lang said:
And, as was said in the aforementioned thread these recoveries are device specific, so even if I got mine to you, it wouldn't work for you.
Click to expand...
Click to collapse
No. Those recovery images are device-type specific. Not device-specific. You can safely take one WIM file from the recovery partition of your device and use it to recover a different device of the identical model.
adam_4049
I see that you were able to start a restore process and it fails in the middle.
You may try the following: boot into the command line mode and format the boot partition (probably drive C: ). This would fix the disk errors if they are present, but you'll lose everything. Use diskpart tool to find the disk letter. Be careful with diskpart - do not delete partitions or issue "clean" command.
Then assign the letter to recovery partition with diskpart (say, R: ), then expand WIM file from the recovery partition with the command like this:
Code:
Dism /apply-image /imagefile:R:\RecoveryImage\install.wim /index:1 /ApplyDir:c:\
R:\RecoveryImage\install.wim - a path to install.wim on the recovery partition.
More info: http://technet.microsoft.com/en-us/library/hh824910.aspx - you need only "Dism /apply-image" part, bcdboot is unnecessary. Lets hope that "apply-image" option is present on RT.
This would forcibly expand the WIM file to your disk C:. Or at least you'll be able to see why it fails.
This may help. Or may completely brick the device and you'll need to go to service. So use it on your own risk. And you should be familiar with the command line - so don't ask how to use diskpart.
I had a problem with the recovery process when I've played with BCD and added a boot from VHD option. Had to delete that extra boot setting - and then recovery went fine. But I assume that you have not played with BCD.
Yeah, looks like people dont use search, what you want is a nice useful soul that creates a USB recovery from his EN-UK Surface_RT and puts it up on Copy, or Dropbox or something like that...

[Q] Exchange the whole UI stack on Android

Hi
I am new to hacking android. I have built linux distros in the past, and have worked with Linux for 15 years,
I have just rooted a ZTE V965. It doesn't come pre-installed with Play store, and has all sorts of ZTE-specific Chinese apps. It has a good baseband circuit, a good screen, reasonable camera and I think is a great value phone, apart from the awful UI.
It is an android phone, although heavily customised. It has an MTK6589 processor coupled with 4Gb ROM and 512Mb RAM.
I have other phones which operate a much more "Vanilla" android. For example, the Guophone 9105 which also uses an MTK6589. This has a troubling tendency to reboot every random interval. Approx 6 times a week.
I have had success in the past running Linux systems built for much earlier kernels on later kernels. This suggests the ABI (application binary interface) for the Linux kernel changes rather slowly.
I am wondering how well the userland apps are separated from the kernel and drivers on Android.
Specifically, is it feasible to dump all the UI stuff from one phone onto another then change the init to launch the other UI?
Would this risk bricking the phone, or would the shell commands and ADB infrastructure still likely operate?
I guess I should change the bootloader to one that supports fastboot first, right? Is ther a how-to on achieveing this from the root shell?
Thanks for any thoughts
Nick.
Nick Hill said:
Hi
I am new to hacking android. I have built linux distros in the past, and have worked with Linux for 15 years,
I have just rooted a ZTE V965. It doesn't come pre-installed with Play store, and has all sorts of ZTE-specific Chinese apps. It has a good baseband circuit, a good screen, reasonable camera and I think is a great value phone, apart from the awful UI.
It is an android phone, although heavily customised. It has an MTK6589 processor coupled with 4Gb ROM and 512Mb RAM.
I have other phones which operate a much more "Vanilla" android. For example, the Guophone 9105 which also uses an MTK6589. This has a troubling tendency to reboot every random interval. Approx 6 times a week.
I have had success in the past running Linux systems built for much earlier kernels on later kernels. This suggests the ABI (application binary interface) for the Linux kernel changes rather slowly.
I am wondering how well the userland apps are separated from the kernel and drivers on Android.
Specifically, is it feasible to dump all the UI stuff from one phone onto another then change the init to launch the other UI?
Would this risk bricking the phone, or would the shell commands and ADB infrastructure still likely operate?
I guess I should change the bootloader to one that supports fastboot first, right? Is ther a how-to on achieveing this from the root shell?
Thanks for any thoughts
Nick.
Click to expand...
Click to collapse
Hi Nick, I have the same phone. I'm also very new to android, last phone was iOS and before that windows. I managed to root the V965 using Vroot. I also managed to install SuperSU and CWM. However, the CWM is not fully functional, I can only do a factory reset, not install any packages or roms. Probably the phone has a locked bootloader. I can't check, because the USB driver with the phone doesnt support fastboot.
I really need to get google play working in this phone, read a lot of stuff, tried many things, but I havent succeeded yet. Please let me know if you make any progress.
In China they are flashing this phone, found some ROMs even, but I am not sure how they manage and google translate isn't much help there.
http://www.romjd.com/Device/zte-v965/hot/all/1
Hmmm my V965 is having some issues now
After a factory reset, the setup wizard keeps crashing. Even after another resest. So I can't get in the phone anymore.
Any chance you can send me the USB drivers that are on the phone? My phone isnt deteceted anymore, so I can't access the drivers, which I want to reinstall. And of course they are not on the ZTE website.
Byte_Me said:
Hmmm my V965 is having some issues now
After a factory reset, the setup wizard keeps crashing. Even after another resest. So I can't get in the phone anymore.
Any chance you can send me the USB drivers that are on the phone? My phone isnt deteceted anymore, so I can't access the drivers, which I want to reinstall. And of course they are not on the ZTE website.
Click to expand...
Click to collapse
Hi
You can temporarily download the ZTE v965 USB drivers from
www dot nickhill dot co dot uk forward slash ztev965usb dot zip
Byte_Me said:
Hi Nick, I have the same phone. I'm also very new to android, last phone was iOS and before that windows. I managed to root the V965 using Vroot. I also managed to install SuperSU and CWM. However, the CWM is not fully functional, I can only do a factory reset, not install any packages or roms. Probably the phone has a locked bootloader. I can't check, because the USB driver with the phone doesnt support fastboot.
Click to expand...
Click to collapse
Fastboot and ADB appear to be standard protocols, at least on my Ubuntu, which don't need special drivers. However, it does appear that the stock boot loaader on the v965 does fail to incorporate the fastboot option.
If you remove the battery, replace it then turn on holding the volume down, you will get a menu, but fastboot is not there.
I don't know for a fact, but I do suspect that if you have access to the running android system as root, then you could in principle change any of the internal flash data. Therefore, in principle, I guess you could replace the boot loader or anything else in the running android system. Anyone please correct me if I am wrong, or confirm if I am right.
The feature set of this phone seems to be the same as the feature set of my Guophone. MTK6589, dual SIM, etc. So this image may be a good place to start if considering a transplant.
If you have ROMs, then perhaps it is possible to flash the ROM from a root terminal. I'm thinking add the uncompressed ROM to the Micro SD card, then using the dd command, block copy it to the appropriate image area on the internal ROM, reboot, reset to factory defaults.
If anyone more experienced than me with the nuts and bolts of Android can confirm or deny this will work, or where it should be put, please let me know.
An important factor is that the NAND is not locked on the ZTE V965. So if you have a root shell on the phone, you can issue the following command:
mount -o remount,rw /[email protected] /system/
Once you have done this, you will have read/write access to the system partition.
The only thing I then need to know is what should I avoid changing that may break the ADB bridge/root console?
And is all the UI stuff kept together, if so, where?
Shuffle it around a bit, make a new ROM
Thanks for the driver!
Unfortuntely it doesn't help
I found out the culprit, I tried to install gapps (google apps package) to the system app folder. I thought these changes would be reversed with a factory reset, but they are not. Setupwizard.apk keeps crashing and is preventing me from accessing my phone, so I must find a way to remove it from the system app folder. However, since this error occurred, I am not able to contact the phone in any way from the PC. Adb toolkit does not detect it, even when I reinstalled your driver. It's quite puzzling, I dont understand why in recovery mode I cannot connect adb-toolkit anymore.
Got my V965 working again, but it was a lot of hassle with shell access. Still not fully functional, no drives detected when i connect to USB, which is quite annoying, but not more than that. If you ever make any progress with google apps or flashing, please keep me informed, that would make this phone much more useable. I'll also keep hacking away at it, but without a bootloader unlock (I still think this is the problem), I don't think it will be possible.
I'm convinced it's possible to flash the phone, it seems they do it a lot in China.
I found a website with a couple of custom ROMs specific for the V965:
http://www.romjd.com/Rom/Detail/17086
And what I suspect is a rooting & flashing tool. Rooting works, I haven't figured out flashing yet.
http://dl.vmall.com/c0xa12brvo
I've also tried flashing from the settings - update menu in the phone, but it never finds the ROM (update.zip)
I did find another problem, I can't be reached on my phone, it always goes to voicemail. Same SIM in another phone works fine. No idea what's causing this.
Byte_Me said:
Got my V965 working again, but it was a lot of hassle with shell access. Still not fully functional, no drives detected when i connect to USB, which is quite annoying, but not more than that. If you ever make any progress with google apps or flashing, please keep me informed, that would make this phone much more useable. I'll also keep hacking away at it, but without a bootloader unlock (I still think this is the problem), I don't think it will be possible.
Click to expand...
Click to collapse
Hi
I might be able to help you with the problem.
I have a mint, unused ZTE v965. I have used MTK Droid root and tools to extract a backup of the entire new phone. It is currently uploading to www dot nickhill dot co dot uk forward slash ZTE-V965_new_backup.zip
You should be able to write this back to your phone using flashtool.exe.
I don't know for sure if this will work, so entirely at your own risk! Just trying to help. If unsure, ask around.
I am new to this forum, so please remember to click the thanks button if you find anything I have done helpful!
Meanwhile, the MTK droid root and tools has a function to remove much of the chinese stuff (once the system has been installed) and there is always the cyanogenmod gapps package. This may be worth investigating.
Nick Hill said:
Hi
I might be able to help you with the problem.
I have a mint, unused ZTE v965. I have used MTK Droid root and tools to extract a backup of the entire new phone. It is currently uploading to www dot nickhill dot co dot uk forward slash ZTE-V965_new_backup.zip
Click to expand...
Click to collapse
The file size should be 635,972,093 bytes and should finish uploading at 04:00 GMT
md5sum 17ecfdd1040d5dbfab70a3adbc24e07a
Thanks for the ROM, i'll give it a go. I will try to install it using the update option in the settings, that seems the safest.
Be careful with gapps. setupwizard.apk + factory reset = a lot of problems (if you install in system app folder)
OMG that tool is awesome. created CWM boot, installed your ROM, then installed a clean ROM, then installed gapps, all working!!!
Byte_Me said:
OMG that tool is awesome. created CWM boot, installed your ROM, then installed a clean ROM, then installed gapps, all working!!!
Click to expand...
Click to collapse
Firstly, I'm glad it's working for you.
Secondly, which tools did you use? Did you unpack the zip, open flashtools, select the scatter file then program the phone, or did you use some other method?
Which clean ROM did you then install, and how did you install it?
Did you then use MobileUncle to install CWM then use the cyanogenmod 10.1 gapps, or did you do something different?
It is useful to remember that MTKdroidtools has a useful function to remove chinese stuff. I think if more people contributed to the list of Chinese files that are safe to remove, that would be blade.
A detailed step-by-step guide might be helpful for anyone else with the same problem. One of the general problems I find is that there are plenty of guides around referring to this program, or that program, but few are detailed enough for someone who doesn't already know about those programs to use.
I pretty much bricked a Lenovo A766 yesterday, and it took several hours to learn about the tools to eventually unbrick it.
I would have rather spent my time understanding what is really going on, rather than spending my time learning vaguely what tool achieves what end result. If I understood more about the Android system, and built that knowledge on my understanding of Linux, I reckon I could achieve much more.
One thing I notice is that tablets and smartphones are actually replacing desktops and laptops. February this year, windows machines were down 7% YOY. I use Ubuntu for my main computer. Using these tools on Windows led me to significant frustration! This has led me to understand why there is a move. Maybe the tools provided for windows need to eventually move to android. We could then potentially use USB OTG to service other android devices. MTKdroidtools and flashtools runnng as a host on a separate Android system would be cool.
Nick Hill said:
Firstly, I'm glad it's working for you.
Click to expand...
Click to collapse
Thanks, me too
Secondly, which tools did you use? Did you unpack the zip, open flashtools, select the scatter file then program the phone, or did you use some other method?
Click to expand...
Click to collapse
I used MTK tools as described in that topic, rooted, made backup, installed CWM
Which clean ROM did you then install, and how did you install it?
Click to expand...
Click to collapse
I used the update tool from CWM to flash this ROM:
http://www.romjd.com/Rom/Detail/17086
That ROM is not very clean though, You might as well clean your own ROM
Did you then use MobileUncle to install CWM then use the cyanogenmod 10.1 gapps, or did you do something different?
Click to expand...
Click to collapse
CWM is installed using MTK Droid Root and Tools:
http://forum.xda-developers.com/showpost.php?p=44660171&postcount=417
This gapps version I installed: gapps-jb-20121011-signed
It's installed using CWM bootloader: install .zip package
It is useful to remember that MTKdroidtools has a useful function to remove chinese stuff. I think if more people contributed to the list of Chinese files that are safe to remove, that would be blade.
Click to expand...
Click to collapse
I used the delete China function, but it didnt catch very much. But with all the functions available now, it's quite easy to clean manually.
A detailed step-by-step guide might be helpful for anyone else with the same problem. One of the general problems I find is that there are plenty of guides around referring to this program, or that program, but few are detailed enough for someone who doesn't already know about those programs to use.
Click to expand...
Click to collapse
Yes, I plan to make a topic for this phone, but at the moment I am still testing many things.
I pretty much bricked a Lenovo A766 yesterday, and it took several hours to learn about the tools to eventually unbrick it. I would have rather spent my time understanding what is really going on, rather than spending my time learning vaguely what tool achieves what end result. If I understood more about the Android system, and built that knowledge on my understanding of Linux, I reckon I could achieve much more.
Click to expand...
Click to collapse
I know how you feel, I was ready to toss this phone in the trash
One thing I notice is that tablets and smartphones are actually replacing desktops and laptops. February this year, windows machines were down 7% YOY. I use Ubuntu for my main computer. Using these tools on Windows led me to significant frustration! This has led me to understand why there is a move. Maybe the tools provided for windows need to eventually move to android. We could then potentially use USB OTG to service other android devices. MTKdroidtools and flashtools runnng as a host on a separate Android system would be cool.
Click to expand...
Click to collapse
I have no idea about the possibilities there. I'm not a programmer, just someone who is good with computers and knows a little bit of everything.
PS. I could also use some thanks as well, maybe get some respect around here
Nick Hill said:
...
Click to expand...
Click to collapse
Did you give it a try yet? Another user did and google apps are working for him, so thats 2 for 2.
Are you still on your original ROM? If so, I have a question for you. Do you get notification badges on your icons, for instance, when you have a missed call, is there a red box with a 1 on the phone icon? Also, do your contacts get ID-ed when they call you? I have some problems with that, caused by the country code prefix. I am still running that ROM I downlaoded from the Chinese forum, but if your ROM doent have these issues, I will switch back ASAP.
Nick Hill said:
Firstly, I'm glad it's working for you.
Click to expand...
Click to collapse
as you are a Lenovo a766 owner, may you help me with this?
http://forum.xda-developers.com/showthread.php?p=49076877#post49076877
Where are configuration settings stored accross factory resets?
I have come to the (perhaps erroneous) conclusion that the user interface and what the user will experience is governed primarily from:
the APKs in
/system/app/
/system/vendor/operator/app/
and the configuration files pertaining to the installed apps, which is located at:
/data/user/0/
I guess that when the android device is factory reset, the /data partition is completely cleared, right?
Is there a set of standard configurations which are unpacked from somewhere into /data/user/0/ after a factory reset, or is it normal for all configurations to be stored in their respective APKs?

Categories

Resources