[Hardware Hacking General] wladimir_tm:
LENOVO K910SS (China version) Vibe Z (Dual SIM) Qualcomm Snapdragon 800 MSM8974

General Device Name: LENOVO K910SS (China version) Vibe Z

Manufacturer Product Name: kiton

Processor: Qualcomm Snapdragon 800 MSM8974

AOS version: Android JB 4.2,2

SW version: VIBEROM_V1.0_1407_2_ST_K910

HW version = K910SS (

dual SIM with WCDMA support

) ;

/// -- NOT K910L (single SIM with WCDMA support EU ver. or K910E dual SIM without WCDMA (CDMA-only) ChinaUnicom ver. !!! ))

USB\VID:

fastboot USB\VID_18D1&PID_D00D&REV_0100

C:\>fastboot devices
32fb6a2 fastboot

C:\>fastboot getvar serialno
serialno: 32fb6a2
finished. total time: 0.004s

C:\>fastboot getvar all
all:
finished. total time: 0.003s

C:\>fastboot getvar version
version: 0.5
finished. total time: 0.003s

C:\>fastboot getvar product
product: MSM8974
finished. total time: 0.003s

C:\>fastboot continue
resuming boot...
OKAY [ 0.002s]
finished. total time: 0.003s

C:\>

system USB\VID_17EF&PID_7713&REV_0232&MI_02

STOCK recovery (v1) -- HAVE NO ADB

root@android:/ # df

df
Filesystem 1K-blocks Used Available Use% Mounted on
tmpfs 951576 48 951528 0% /dev
tmpfs 951576 0 951576 0% /mnt/secure
tmpfs 951576 0 951576 0% /mnt/asec
tmpfs 951576 0 951576 0% /mnt/obb
/dev/block/platform/msm_sdcc.1/by-name/system
1550664 903020 647644 58% /system
/dev/block/platform/msm_sdcc.1/by-name/userdata
12869012 497000 12372012 4% /data
/dev/block/platform/msm_sdcc.1/by-name/cache
129060 4200 124860 3% /cache
/dev/block/platform/msm_sdcc.1/by-name/persist
32292 4248 28044 13% /persist
/dev/block/platform/msm_sdcc.1/by-name/modem
65488 51808 13680 79% /firmware
/dev/fuse 12817812 497000 12320812 4% /mnt/shell/emulated
/dev/fuse 12817812 497000 12320812 4% /storage/emulated/legacy

root@android:/ # mount

mount
rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/secure tmpfs rw,relatime,mode=700 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/platform/msm_sdcc.1/by-name/system /system ext4 ro,relatime,discard,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/userdata /data ext4 rw,nosuid,nodev,relatime,discard,noauto_da_alloc,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/cache /cache ext4 rw,nosuid,nodev,relatime,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/persist /persist ext4 rw,nosuid,nodev,relatime,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/modem /firmware vfat ro,relatime,uid=1000,gid=1000,fmask=0337,dmask=0227,codepage=cp437,iocharset=iso8859-1,shortname=lower,er
rors=remount-ro 0 0
/dev/fuse /mnt/shell/emulated fuse rw,nosuid,nodev,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/fuse /storage/emulated/legacy fuse rw,nosuid,nodev,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0

root@android:/ # cat /proc/partitions

cat /proc/partitions
major minor #blocks name

179 0 15267840 mmcblk0
179 1 65536 mmcblk0p1
179 2 512 mmcblk0p2
179 3 32 mmcblk0p3
179 4 500 mmcblk0p4
179 5 2048 mmcblk0p5
179 6 1 mmcblk0p6
179 7 8 mmcblk0p7
179 8 32 mmcblk0p8
179 9 20480 mmcblk0p9
179 10 20480 mmcblk0p10
179 11 20480 mmcblk0p11
179 12 131072 mmcblk0p12
179 13 500 mmcblk0p13
179 14 1024 mmcblk0p14
179 15 1536 mmcblk0p15
179 16 1536 mmcblk0p16
179 17 1536 mmcblk0p17
179 18 32768 mmcblk0p18
179 19 131072 mmcblk0p19
179 20 1572864 mmcblk0p20
179 21 13105135 mmcblk0p21
179 32 4096 mmcblk0rpmb

root@android:/ # ls -l /dev/block/

ls -l /dev/block/
brw------- root root 7, 0 1970-09-02 01:44 loop0
brw------- root root 7, 1 1970-09-02 01:44 loop1
brw------- root root 7, 2 1970-09-02 01:44 loop2
brw------- root root 7, 3 1970-09-02 01:44 loop3
brw------- root root 7, 4 1970-09-02 01:44 loop4
brw------- root root 7, 5 1970-09-02 01:44 loop5
brw------- root root 7, 6 1970-09-02 01:44 loop6
brw------- root root 7, 7 1970-09-02 01:44 loop7
brw------- root root 179, 0 1970-09-02 01:44 mmcblk0
brw------- root root 179, 1 1970-09-02 01:44 mmcblk0p1
brw------- root root 179, 10 1970-09-02 01:44 mmcblk0p10
brw------- root root 179, 11 1970-09-02 01:44 mmcblk0p11
brw------- root root 179, 12 1970-09-02 01:44 mmcblk0p12
brw------- root root 179, 13 1970-09-02 01:44 mmcblk0p13
brw------- root root 179, 14 1970-09-02 01:44 mmcblk0p14
brw------- root root 179, 15 2014-08-25 00:08 mmcblk0p15
brw------- root root 179, 16 1970-09-02 01:44 mmcblk0p16
brw------- root root 179, 17 1970-09-02 01:44 mmcblk0p17
brw------- root root 179, 18 1970-09-02 01:44 mmcblk0p18
brw------- root root 179, 19 1970-09-02 01:44 mmcblk0p19
brw------- root root 179, 2 1970-09-02 01:44 mmcblk0p2
brw------- root root 179, 20 1970-09-02 01:44 mmcblk0p20
brw------- root root 179, 21 1970-09-02 01:44 mmcblk0p21
brw------- root root 179, 3 1970-09-02 01:44 mmcblk0p3
brw------- root root 179, 4 1970-09-02 01:44 mmcblk0p4
brw------- root root 179, 5 1970-09-02 01:44 mmcblk0p5
brw------- root root 179, 6 1970-09-02 01:44 mmcblk0p6
brw------- root root 179, 7 1970-09-02 01:44 mmcblk0p7
brw------- root root 179, 8 1970-09-02 01:44 mmcblk0p8
brw------- root root 179, 9 1970-09-02 01:44 mmcblk0p9
brw------- root root 179, 32 1970-09-02 01:44 mmcblk0rpmb
drwxr-xr-x root root 1970-09-02 01:44 platform
brw------- root root 1, 0 1970-09-02 01:44 ram0
brw------- root root 1, 1 1970-09-02 01:44 ram1
brw------- root root 1, 10 1970-09-02 01:44 ram10
brw------- root root 1, 11 1970-09-02 01:44 ram11
brw------- root root 1, 12 1970-09-02 01:44 ram12
brw------- root root 1, 13 1970-09-02 01:44 ram13
brw------- root root 1, 14 1970-09-02 01:44 ram14
brw------- root root 1, 15 1970-09-02 01:44 ram15
brw------- root root 1, 2 1970-09-02 01:44 ram2
brw------- root root 1, 3 1970-09-02 01:44 ram3
brw------- root root 1, 4 1970-09-02 01:44 ram4
brw------- root root 1, 5 1970-09-02 01:44 ram5
brw------- root root 1, 6 1970-09-02 01:44 ram6
brw------- root root 1, 7 1970-09-02 01:44 ram7
brw------- root root 1, 8 1970-09-02 01:44 ram8
brw------- root root 1, 9 1970-09-02 01:44 ram9
drwx------ root root 2009-01-02 21:00 vold

root@android:/ # ls -l /dev/block/platform/msm_sdcc.1/by-name

ls -l /dev/block/platform/msm_sdcc.1/by-name
lrwxrwxrwx root root 1970-09-02 01:44 DDR -> /dev/block/mmcblk0p8
lrwxrwxrwx root root 1970-09-02 01:44 aboot -> /dev/block/mmcblk0p5
lrwxrwxrwx root root 1970-09-02 01:44 boot -> /dev/block/mmcblk0p9
lrwxrwxrwx root root 1970-09-02 01:44 cache -> /dev/block/mmcblk0p19
lrwxrwxrwx root root 1970-09-02 01:44 dbi -> /dev/block/mmcblk0p3
lrwxrwxrwx root root 1970-09-02 01:44 fsc -> /dev/block/mmcblk0p6
lrwxrwxrwx root root 1970-09-02 01:44 fsg -> /dev/block/mmcblk0p17
lrwxrwxrwx root root 1970-09-02 01:44 modem -> /dev/block/mmcblk0p1
lrwxrwxrwx root root 1970-09-02 01:44 modemst1 -> /dev/block/mmcblk0p15
lrwxrwxrwx root root 1970-09-02 01:44 modemst2 -> /dev/block/mmcblk0p16
lrwxrwxrwx root root 1970-09-02 01:44 mrd -> /dev/block/mmcblk0p12
lrwxrwxrwx root root 1970-09-02 01:44 pad -> /dev/block/mmcblk0p14
lrwxrwxrwx root root 1970-09-02 01:44 persist -> /dev/block/mmcblk0p18
lrwxrwxrwx root root 1970-09-02 01:44 recovery -> /dev/block/mmcblk0p10
lrwxrwxrwx root root 1970-09-02 01:44 rpm -> /dev/block/mmcblk0p4
lrwxrwxrwx root root 1970-09-02 01:44 sbl1 -> /dev/block/mmcblk0p2
lrwxrwxrwx root root 1970-09-02 01:44 splash -> /dev/block/mmcblk0p11
lrwxrwxrwx root root 1970-09-02 01:44 ssd -> /dev/block/mmcblk0p7
lrwxrwxrwx root root 1970-09-02 01:44 system -> /dev/block/mmcblk0p20
lrwxrwxrwx root root 1970-09-02 01:44 tz -> /dev/block/mmcblk0p13
lrwxrwxrwx root root 1970-09-02 01:44 userdata -> /dev/block/mmcblk0p21

root@android:/ # cat /system/build.prop (partially; full text - look at attachment):

cat /system/build.prop
# begin build properties
# autogenerated by buildinfo.sh
ro.build.id=JDQ39
ro.build.display.id=JDQ39
ro.build.version.incremental=VIBEROM_V1.0_1407_2_ST_K910
ro.build.version.sdk=17
ro.build.version.codename=REL
ro.build.version.release=4.2.2
ro.build.date=Mon Jan 27 12:39:15 CST 2014
ro.build.date.utc=1390797555
ro.build.type=user
ro.build.user=buildslave
ro.build.host=xmsw31
ro.build.tags=releasekey
ro.product.model=Lenovo K910
ro.product.brand=Lenovo
ro.product.name=kiton
ro.product.device=kiton
ro.product.board=MSM8974
ro.product.cpu.abi=armeabi-v7a
ro.product.cpu.abi2=armeabi
ro.product.manufacturer=LENOVO
ro.wifi.channels=
ro.board.platform=msm8974
# ro.build.product is obsolete; use ro.product.device
ro.build.product=kiton
# Do not try to parse ro.build.description or .fingerprint
ro.build.description=kiton-user 4.2.2 JDQ39 VIBEROM_V1.0_1407_2_ST_K910 releasekey
ro.build.fingerprint=Lenovo/kiton/kiton:4.2.2/JDQ39/VIBEROM_V1.0_1407_2_ST_K910:user/releasekey
ro.build.characteristics=nosdcard
ro.lenovo.series=VIBE Z
# end build properties
#...

root@android:/ # parted /dev/block/mmcblk0

parted /dev/block/mmcblk0
GNU Parted 1.8.8.1.179-aef3
Using /dev/block/mmcblk0
Welcome to GNU Parted! Type 'help' to view a list of commands
(parted) p
p
p
Model: MMC MAG2GC (sd/mmc)
Disk /dev/block/mmcblk0: 15.6GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt

Number Start End Size File system Name Flags
1 67.1MB 134MB 67.1MB fat16 modem
2 134MB 135MB 524kB sbl1
3 135MB 135MB 32.8kB dbi
4 135MB 135MB 512kB rpm
5 135MB 137MB 2097kB aboot
6 137MB 137MB 1024B fsc
7 137MB 137MB 8192B ssd
8 201MB 201MB 32.8kB DDR
9 201MB 222MB 21.0MB boot
10 222MB 243MB 21.0MB recovery
11 243MB 264MB 21.0MB splash
12 268MB 403MB 134MB mrd
13 403MB 403MB 512kB tz
14 403MB 404MB 1049kB pad
15 404MB 406MB 1573kB modemst1
16 406MB 407MB 1573kB modemst2
17 407MB 409MB 1573kB fsg
18 409MB 442MB 33.6MB ext4 persist
19 470MB 604MB 134MB ext4 cache
20 604MB 2215MB 1611MB ext4 system
21 2215MB 15.6GB 13.4GB ext4 userdata

root@android:/ # gdisk /dev/block/mmcblk0

gdisk /dev/block/mmcblk0
GPT fdisk (gdisk) version 0.8.4

Caution: invalid backup GPT header, but valid main header; regenerating
backup header from main header.

Partition table scan:
MBR: protective
BSD: not present
APM: not present
GPT: damaged

****************************************************************************
Caution: Found protective or hybrid MBR and corrupt GPT. Using GPT, but disk
verification and recovery are STRONGLY recommended.
****************************************************************************

Command (? for help): p
p
Disk /dev/block/mmcblk0: 30535680 sectors, 14.6 GiB
Logical sector size: 512 bytes
Disk identifier (GUID): 98101B32-BBE2-4BF2-A06E-2BB33D000C20
Partition table holds up to 24 entries
First usable sector is 34, last usable sector is 30535646
Partitions will be aligned on 2-sector boundaries
Total free space is 317308 sectors (154.9 MiB)

Number Start (sector) End (sector) Size Code Name
1 131072 262143 64.0 MiB 0700 modem
2 262144 263167 512.0 KiB FFFF sbl1
3 263168 263231 32.0 KiB FFFF dbi
4 263232 264231 500.0 KiB FFFF rpm
5 264232 268327 2.0 MiB FFFF aboot
6 268328 268329 1024 bytes FFFF fsc
7 268330 268345 8.0 KiB FFFF ssd
8 393216 393279 32.0 KiB FFFF DDR
9 393280 434239 20.0 MiB FFFF boot
10 434240 475199 20.0 MiB FFFF recovery
11 475200 516159 20.0 MiB FFFF splash
12 524288 786431 128.0 MiB FFFF mrd
13 786432 787431 500.0 KiB FFFF tz
14 787432 789479 1024.0 KiB 0700 pad
15 789480 792551 1.5 MiB FFFF modemst1
16 792552 795623 1.5 MiB FFFF modemst2
17 795624 798695 1.5 MiB FFFF fsg
18 798696 864231 32.0 MiB 0700 persist
19 917504 1179647 128.0 MiB 0700 cache
20 1179648 4325375 1.5 GiB 0700 system
21 4325376 30535646 12.5 GiB 0700 userdata

additionally: from "sdfuse" FW packadge:

flash_local.xml

<?xml version="1.0" encoding="utf-8"?>
<sahara_config>
<images>
<image image_id="13" image_path="D:\bin\MPRG8974.mbn" programmer="true" />
</images>
</sahara_config>

& look at attached patch0.xml.txt, rawprogram0.xml.txt

and sdfuse-flash-K910_SS_S_2_040_0109_131226.qsb.log.txt - example log of flashing device