yashsingh1/xdaforums huggingface dataset:
[Acer Iconia Tab A100] Icewyng:
Was able to extract the blob and, for ICS, it is the EBT partition that is modified. Of course, since it is encrypted, I cannot see inside it.

Could you dd the boot partition and check inside it?

Btw, here is the info from the NvFlash flash,cfg:

[device]

type=hsmmc

instance=3

[partition]

name=BCT

id=2

type=boot_config_table

allocation_policy=sequential

filesystem_type=basic

size=3145728

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

[partition]

name=PT

id=3

type=partition_table

allocation_policy=sequential

filesystem_type=basic

size=4096

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

[partition]

name=EBT

id=4

type=bootloader

allocation_policy=sequential

filesystem_type=basic

size=4194304

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

filename=bootloader.bin

[partition]

name=GP1

id=5

type=GP1

allocation_policy=sequential

filesystem_type=basic

size=1048576

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

[partition]

name=SOS

id=6

type=data

allocation_policy=sequential

filesystem_type=basic

size=5242880

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

filename=recovery.img

[partition]

name=LNX

id=7

type=data

allocation_policy=sequential

filesystem_type=basic

size=8388608

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

filename=boot.img

[partition]

name=APP

id=8

type=data

allocation_policy=sequential

filesystem_type=basic

size=629145600

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

filename=system.img

[partition]

name=CAC

id=9

type=data

allocation_policy=sequential

filesystem_type=ext3

size=1283457024

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

[partition]

name=MSC

id=10

type=data

allocation_policy=sequential

filesystem_type=ext3

size=4194304

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

[partition]

name=FLX

id=11

type=data

allocation_policy=sequential

filesystem_type=basic

size=104857600

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

filename=flexrom.img

[partition]

name=AKB

id=12

type=data

allocation_policy=sequential

filesystem_type=basic

size=10485760

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

[partition]

name=UDA

id=13

type=data

allocation_policy=sequential

filesystem_type=ext3

size=18432

file_system_attribute=0

partition_attribute=0

allocation_attribute=0x808

percent_reserved=0

[partition]

name=GPT

id=14

type=GPT

allocation_policy=sequential

filesystem_type=basic

size=0xFFFFFFFFFFFFFFFF

file_system_attribute=0

partition_attribute=0

allocation_attribute=8

percent_reserved=0

Edit: try to DD the aboot partition as well... it might be where the action is.
[Acer Iconia Tab A100] smokku:
I have looked in the boot image, but there's nothing out of ordinary there.

Looks like Acer did it right and all the fun is in the encrypted bootloader.
[Acer Iconia Tab A100] Icewyng:
what about the aboot partition? (p8)
[Acer Iconia Tab A100] smokku:
It's /data under normal circumstances.

But yeah, /aboot suggests it may have other use.
[Acer Iconia Tab A100] Icewyng:
Sorry, didn't have my notes when I said that. Well... /aboot is an emmc partition on /dev/block/mmcblk0p8... and look at this (coming from bugreport):

[ro.crypto.fs_flags]: [0x00000406]

[ro.crypto.fs_mnt_point]: [/data]

[ro.crypto.fs_real_blkdev]: [/dev/block/mmcblk0p8]

[ro.crypto.fs_type]: [ext4]

[ro.crypto.state]: [unencrypted]

[ro.crypto.tmpfs_options]: [size=128m,mode=0771,uid=1000,gid=1000]

so, I would think the interesting stuff would be in aboot. Looks something similar as uboot...
[Acer Iconia Tab A100] BrothaJINC:
Not trying to be an ass but has there been any progress in unlocking the bootloader........
[Acer Iconia Tab A100] Icewyng:
no.

Since it i encrypted, it is a very slow and painful process, to say the least.
[Acer Iconia Tab A100] smokku:
I wanted to check which number is correct for A100 EUUs, but I can't install it.

The installation wizard does not detect my tablet both in ADB and APX modes :/
[Acer Iconia Tab A100] Icewyng:
Using Windows? Did you plug your A100 only when it tries to detect it?

---------- Post added at 12:05 PM ---------- Previous post was at 12:01 PM ----------

I've stumbled across this:

abootimg git

Looks to be useful for reading android boot imgs.
[Acer Iconia Tab A100] smokku:
Yes, on Windows. I kept my pre-installed one exactly for these occasions. ;-)

The EUUs installer says something like: "Make sure you have your phone connected before pressing OK". So I entered APX mode and plugged tablet in.

I was sure EUUs operates in APX mode. But after it failed detecting the "phone" it instructed me how to enable ADB in settings.

So I rebooted the tablet, connected it in ADB mode and tried again. It failed detecting the device again.

I am using http://android-dls.com/wiki/index.php?title=HOWTO:_Unpack,_Edit,_and_Re-Pack_Boot_Images to extract boot.img content and standard mkbootimg tool from Android SDK to rebuild it.
[Acer Iconia Tab A100] oneovakindoldys2:
@smokku, when you install the euus you will need to unpack it and run the pbj upgrade in administrator mode in windows and follow the instructions on the screen. the program will put the tab in apx mode for you. also, in regards to the boot.img, i have already unpacked the boot.img and recompiled it and i have a new image ready to flash if someone can find a way to get it on the tablet. you can check out the deodex thread where i posted several days ago. i will be glad to work with you guys anyway i can if you or icewyng have any ideas. i am glad to see someone else with interest in getting this thing opened up. good luck!

---------- Post added at 12:26 AM ---------- Previous post was at 12:10 AM ----------

when you guys get the boot.img unpacked, you will seperate the kernel from the ramdisk. after you get it opened up have a good look at init.vangogh.rc., default.prop,etc. when you get it broken down you can edit the information and recompile it with the correct settings to get fastboot and nvflash working, but i have yet to find a way to get it back on the tablet. has anyone been able to unpack [[[any]]] acer iconia rom, and then repack it, even [[without]] editing it and get the signature correct to flash it back to the tablet? thanks
[Acer Iconia Tab A100] Icewyng:
I have been editing all the .rc files before and tried to get them back but it did not work. I think the only way will be with NvFlash or Fastboot. Anyone talked to the A500 guys to know how they got their unlocker to work?

As for my tablet, unless I can get NvFlash to work, It is screwed for now. I can still do dev work but just not test it. :)
[Acer Iconia Tab A100] o0TheFLaSH0o:
Is there something I can edit in the build prop to help the screen sensitivity? In YouTube and Netflix I can't scroll without without unintentional selections.
[Acer Iconia Tab A100] smokku:
They looked (in disassembler) at EUUs code that generates SBK from CPUID.
[Acer Iconia Tab A100] oneovakindoldys2:
what they did on the a500 ics bootloader was really rather simple....they already had itsmagic and an [unlocked nvflash] in hc 3.0, which we don't have. their bootloader, as well as nvflash were locked up tight in ics just as ours is, however they just patched the bootloader by using nvflash from hc. you can read this thread....post #52 will explain it pretty well if you don't want to read the whole thread....however the entire thread it very useful reading for us a100 owners. i'm trying a few different methods and i will let you guys know if i find anything new and i hope you will do the same. good luck
[Acer Iconia Tab A100] Icewyng:
Makes sense. The problem I had was that Acer Recovery App is installing the recovery but it installs Itsmagic as well and this is why I am stuck at this moment. If it was one or the other, fine... but both at the same time killed it for me.

I am sure there would be a way to do the same for us as well. I will have to check it out and see what happens. They've checked the EUU with an diassembler?? Wow... lots of work for sure! Maybe we should do the same as well.
[Acer Iconia Tab A100] oneovakindoldys2:
@icewyng....what are you able to access on your tab? can you get to adb at all? apx mode? if you can access apx mode, hook your tab to your pc...run the euus...instead of finishing it, let it sit for about two minutes....it should ask if you wish to wipe all data from your tab. it wont wipe a functional tab, but by chance it could possibly wipe a [disabled sos] tab. this probably won't work, but it is worth a try. good luck
[Acer Iconia Tab A100] smokku:
'itsmagic' wipes your APK (mmcblk0p7) partition, overwriting it with magic value, that forces bootloader to recalculate boot (p1) and recovery (p2) signatures.

As we have a different magic value than A500, this is what killed your tab - you lost your boot and recovery signatures, and bootloader won't boot any of these.

You should be able to recover your dead device using EUUs - this is a service tool designed exactly for this purpose.

But I couldn't make it work at all. Maybe you would have a better luck.
[Acer Iconia Tab A100] Icewyng:
Yea... that is what you get for experimenting stuff that you are not 100% sure of. :)

The thing is that I use Linux and not Windows... It might make it a bit more difficult to do. I do have APX and fastboot so I am not too worried about it. I just need to find a way to get it back.

@oneovaking... are you sure about that? if so, I guess it would be a good way to get out of it.
[Acer Iconia Tab A100] oneovakindoldys2:
@smokku, yes, if we could get euus to function correctly with our cpuid our problems would very likely be solved, however at this point noone has been able to accomplish this as far as i am aware of. if you want, you can decompress the a100 euus and unpack it and you will find the [old] a100 imahe and all of the nvflash config files as well as the md5sums in a seperate file , so someone has almost certainly had nvflash working on the old version, but i have not figured out how to get it on our tabs without a working euus,nvflash, or fastboot, but i am certainly not an expreienced dev like several of the a500 developers are. you guys may be able to make some progress if you have time to thoroughly look it over.

@icewyng, yes, i am certain that it will wipe an a500, but i have yet to get it to wipe my a100, but as i said, mine has a working operating system. what happens is you will try to trick the euus into not seeing an operating system on your tab, after it does not see an operating system it will format and reinstall in theory. it works fine with the a500, but as you know, we have a problem somewhere so it won't work for us. i beleive that our problem could possibly be with the nvflash config files, etc not being correct. good luck
[Acer Iconia Tab A100] madmalkav:
Can you please explain how? I'm in a similar situation with antoher tegra based tablet and I think I'm missing something. Trying blobtools version posted on another thread that have support for encrypted blobs, but it has the crypto key in the .h file and it is longer that the second field of the res/keys that I thought was the key for unsigning.
[Acer Iconia Tab A100] peporras:
No sirve de nada
[Acer Iconia Tab A100] madmalkav:
Thanks but we got a recovery program and a OTA file from the producer of this tablet. I have been analyzing those for some hours and instead of using standard tegra security, they are ofuscating the files with modified file formats. good newsis tablet is back to work, bad news is I will not be able to resort to already discovered tegra securiry flags with this machine.
[Acer Iconia Tab A100] smokku:
Could you please share it?
[Acer Iconia Tab A100] madmalkav:
This is the link for the OTA update. I don't have access to the recovery program and the acompanying image right now, will share it on weekend at the very latest.

http://www.mediafire.com/?vr4x8sg8428bl28
[Acer Iconia Tab A100] toyface:
Does this at all differ from the 012 leaked rom?
[Acer Iconia Tab A100] Nallelir1:
Okayyy
[Acer Iconia Tab A100] Icewyng:
Did anyone else noticed the Development Device ID that is in the new developer options category (under Settings)? Anyone has an idea what that is for?
[Acer Iconia Tab A100] eww245:
adb wireless will work through your phone.

If adb is not on the phone it can be copied from /system/bin/adb

[edit]sorry that won't work setprop needs root
[Acer Iconia Tab A100] eww245:
Someone want to try this, after it's loop mounted

# mount -wo remount /
# mount --bind /data/local/tools/loop /system

See if it can be mounted r/w and r/o
[Acer Iconia Tab A100] Icewyng:
The first line is fine but it says the bind option is invalid.
[Acer Iconia Tab A100] eww245:
Really, ok:

mount -o bind /data/local/tools/loop /system

If that doesn't work try it with busybox mount or if you already are try it with /system/bin/mount
[Acer Iconia Tab A100] Icewyng:
No effect in both cases. The first command was FCing my root apps. I had to reboot.
[Acer Iconia Tab A100] eww245:
Thought that might happen, have to get some more ideas.

[edit] So maybe using 'stop' will help, from adb

# stop

# mount -o bind /data/local/tools/loop /system

# start

There probably won't be a bootanimation, but if it gets to the lockscreen it should be ok without FCs. If it bootloops just hold in the power button or use the pinhole reset.

I should just suck it up and upgrade just don't think I'm ready.
[Acer Iconia Tab A100] rando152:
Is this supposed to be done on the a100 through terminal emulator?
[Acer Iconia Tab A100] eww245:
It needs to be done in adb. If you don't have it set up, and you use windows, download a10x_rooting.zip from this thread xdaforums.com/showthread.php?t=1487142. Using this avoids the hassle of installing the full SDK. So after unzipping open cmd and cd to that folder. adb devices should show the a100 is connected. If that doesn't help there are many adb tutorials on XDA
[Acer Iconia Tab A100] rando152:
It's times like this I wish I had a pc :(
[Acer Iconia Tab A100] crossix:
I've almost got a 1 click solution done, just having some issues with mounting the loop file system via scripts.. It mounts the scripts run fine, but it doesn't actually copy su & busybox to /system/xbin for some reason.. it looks like its there when you ls ./loop/xbin but when you ls /system/xbin no bueno...

Edit: OK, wierd.. after a reboot the files show up, but when you try to install superuser from the market it can't get root, when you try su from adb it says permission denied.. I tried it right after running my rooting scripts, both before reboot and after (re-enabling the loop) so back to the drawling board :(
[Acer Iconia Tab A100] Icewyng:
Anyone read about all the fastboot stuff going on for the A500? Seems the bootloader "might" be unlockable?

Sent from my A100 (ICS-4.0.3)
[Acer Iconia Tab A100] pintek:
Um call me crazy or a un-knowledgeable person but could we somehow port CF-root to our tablet since its designed work with the same kernal version we have? >.>
[Acer Iconia Tab A100] Icewyng:
Could you send a link so I can check it out?

Edit: since it seems to be a kernel mod flashed with fastboot, I think it would not be possible right now.

Sent from my A100 (ICS-4.0.3)
[Acer Iconia Tab A100] pintek:
Here is the link I was hoping it maybe be something that could help wish i was better with software engineering to be more use >.<

http://xdaforums.com/showthread.php?t=1396952
[Acer Iconia Tab A100] toyface:
I've been following along, I have fastboot set up on my Linux box so will have a play, I think the consensus is that "OEM unlock" is disable in the build.
[Acer Iconia Tab A100] eww245:
Not sure why the files aren't showing up. Maybe try busybox sync after copying them.

[edit] I asssume you can get root manually and it's just a problem with your script?

Let me know, hopefully the instructions are all correct now. I updated them several times yesterday.

Also, there might be an easier way than what I posted, if you find one post it here or shoot me a PM.
[Acer Iconia Tab A100] spino1970:
Crossin' fingers on your efforts, guys! :D
[Acer Iconia Tab A100] crossix:
Thanks, I'm having to use a slightly different method since I can't pass arguments through adb shell and mempodroid. It's copying all the files to the tab and executing shell scripts for each step in the process based off a combo of your root method and the one found for the toshiba tab. Hopefully I'll get it figured out soon..
[Acer Iconia Tab A100] NoSudo:
Let me know if I can help with the script. You may already use this but it can be useful to run the script with a -x before sh to run in debug mode. That way you can see allot more, like what values are assigned to variables, how expressions are evaluated, and errors that don't cause a hault. I find it very valuable when I write a new script.
[Acer Iconia Tab A100] eww245:
bumping this^ could someone try it.

Looks like the a500 got rooted with the same method. xdaforums.com/showpost.php?p=22862959&postcount=306 There's one difference with the loop mount. So can someone try this and see if it mounts writable. Just trying to make things simpler, Thanks

busybox losetup /dev/block/loop7 /dev/block/mmcblk0p3

mount -t ext4 /dev/block/loop7 /data/local/tools/loop

Also looks like they ran memopdroid on the tablet, so maybe I can refine it some more.
[Acer Iconia Tab A100] crossix:
mempodroid will run on the tablet as long as you can find some place to copy it to and change its permissions to executable. The a500 method is the same as what I'm using in my 1 click solution only via a series of .sh scripts called from a .bat file.
[Acer Iconia Tab A100] notsointeresting:
I can't get this to work for the life of me, and I believe its because im not completely understanding the directions.

The directions say "After downloading and extracting place them all in a folder called tools.

This must be done with adb. Issue the following from cmd or a terminal:"

Does this mean download on the computer and put them in a folder on windows called tools? or does this mean on the root of the sdcard of the tablet?

When I type "adb shell mkdir tools" I get "mkdir failed for tools, Read-only file system"

Any help would be appreciated :) Thanks.
[Acer Iconia Tab A100] eww245:
Should be adb mkdir /data/local/tools.

When trying to make things simpler it seems to become more complicated.
[Acer Iconia Tab A100] PokrTom:
Unable to mount loop

Following the steps in Message #1 and get temp root however when I try to do the mount using the following command...

mount -t ext4 /dev/block/loop7 /data/local/tools/loop

I get the following error...

mount: Invalid argument

When I check the mount list I do not see a loop7 mount...

rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/mmcblk0p3 /system ext4 ro,relatime,user_xattr,acl,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p8 /data ext4 rw,nosuid,nodev,noatime,user_xattr,acl,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p4 /cache ext4 rw,nosuid,nodev,noatime,user_xattr,acl,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p6 /system/vendor ext4 ro,relatime,user_xattr,acl,barrier=1,data=ordered 0 0
/dev/fuse /mnt/sdcard fuse rw,nosuid,nodev,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/block/vold/179:33 /mnt/external_sd vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0

After reboot I don't have root and I get the same error when I step through temp root and do the mount again.

I'm not sure if I am doing something wrong but at this point the method is not working for me.
[Acer Iconia Tab A100] crossix:
Something interesting I found yes.. hmm..

You too can get to this by rebooting your tab without an update.zip file and trying to get to recovery. When the dead android displays press the home button. Use the arrow keys for different selections.. but Im not sure how to actually make a selection yet. Its a shame this doesnt have a backup / restore function...
[Acer Iconia Tab A100] pintek:
Well that is definately a huge surprise to see crossix o.o
[Acer Iconia Tab A100] oneovakindoldys2:
Are you working on fastboot.....or did you just try a recovery?
[Acer Iconia Tab A100] NoSudo:
That's interesting. Did you try the screen lock switch, and/or home button for choosing a selection?
[Acer Iconia Tab A100] mvan4310:
Interesting find.... I'm thinking they have it set up for a dock to enable selections...
[Acer Iconia Tab A100] crossix:
Its the stock acer recovery, the gui was just hidden. Not sure if it has any usefulness yet.
[Acer Iconia Tab A100] mvan4310:
Im not able to get anything through with fastboot, likely because my PC isnt getting the drivers installed when it goes into recovery. Im a newb in this area, but I tried, lol
[Acer Iconia Tab A100] dms76:
I'm a little confused does the method in the op work to roo ics?
[Acer Iconia Tab A100] Icewyng:
Impressive Crossix... I wonder if this could help out in getting RA Recovery or CWR to work?

The more clues we get, the more I think this could very well be a real dev build for the A100...

Edit: I remember the GTab having something similar... I will have to check it out.

Edit2: Seems they use home to select... It has to be a button combo for the Acer. Did you check to see if there is a cache/recovery.log somewhere?

Edit3: Did anyone try a nandroid backup btw?
[Acer Iconia Tab A100] eww245:
Was wondering where that was, as far as I know every android has that stock recovery.
[Acer Iconia Tab A100] eww245:
Try removing the loop and try again

./busybox losetup -d /dev/block/loop7

Also make sure your not using a cached version of the page I made a few changes yesterday. Clear your browser cache.
[Acer Iconia Tab A100] jondi23:
had anyone use superoneclick?
[Acer Iconia Tab A100] masterpker2:
I tried super one click it did not work
[Acer Iconia Tab A100] jeromel:
From line

mount -t ext4 /dev/block/loop7 /data/local/tools/loop

I get back

mount: Invalid argument

Just like other people. hmmm...
[Acer Iconia Tab A100] :
Shouldn't the command you have listed:

./busybox losetup -o $((512 * 51200)) /dev/block/loop7 /dev/block/mmcblk0

Actually be:

./busybox losetup -o $((512 * 51200)) /dev/block/loop7 /dev/block/mmcblk0p3

When I issue the command 'mount' it shows /dev/block/mmcblk0p3 /system ext4 ro,relatime,user_xattr,acl,barrier=1,data=ordered 0 0, among other items. Just trying to help... I don't see the mmcblk0 listed...

---------- Post added at 07:52 PM ---------- Previous post was at 07:11 PM ----------

OK - I just performed the steps in the link you provided above - for the A500 - and I have root. I can't get su permissions to work under adb shell, but I can get into root apps such as TiBu - running a batch job now.

I set up Superuser.apk by default to allow SU rights. Now I already gave TiBu SU rights before I upgraded to ICS - when I try to grant su rights to a new app, such as AppExtractor, it didn't work - I got an error - no root. If I try to mount /system/xbin or /system/bin with R/W in Root Explorer, it doesn't - the "mount r/w" button is at the top (I think because it was rooted prior to upgrade).

I do see su in /system/bin, but can't see or modify the permissions. Hope this info helps.