[Asus Padfone X and S] AdamOutler:
I'm exploring options to get root on this device. I started by probing UART on normal boot mode for aproximately three hours, yesterday. I was not able to produce any worth-while results.

In recovery mode, i was able to pull the Recovery Logs from /cache.

We can see that it starts with OPEN_PadFone-11.9.0.118-20140429-F firmware

__bionic_open_tzdata: couldn't find any tzdata when looking for localtime!
__bionic_open_tzdata: couldn't find any tzdata when looking for GMT!
__bionic_open_tzdata: couldn't find any tzdata when looking for posixrules!
Starting recovery on Thu Jan 1 08:58:27 1970
recovery filesystem table
=========================
0 /system ext4 /dev/block/platform/msm_sdcc.1/by-name/system 0
1 /cache ext4 /dev/block/platform/msm_sdcc.1/by-name/cache 0
2 /data ext4 /dev/block/platform/msm_sdcc.1/by-name/userdata -16384
3 /sdcard vfat /dev/block/mmcblk1p1 0
4 /boot emmc /dev/block/platform/msm_sdcc.1/by-name/boot 0
5 /recovery emmc /dev/block/platform/msm_sdcc.1/by-name/recovery 0
6 /misc emmc /dev/block/platform/msm_sdcc.1/by-name/misc 0
7 /demoapp ext4 /dev/block/platform/msm_sdcc.1/by-name/demoapp 0
8 /tombstone ext4 /dev/block/platform/msm_sdcc.1/by-name/tombstones 0
9 /gmxt ext4 /dev/block/platform/msm_sdcc.1/by-name/gmxt 0
10 /tmp ramdisk ramdisk 0

locale is [(null)]
framebuffer: fd 4 (1080 x 1920)
hdmi_init(fb0_fd=4,framebuffer=0xb5f21000)+++
using (fd=4)
id = mdssfb_80000
xres = 1080 px
yres = 1920 px
xres_virtual = 1080 px
yres_virtual = 3840 px
bpp = 16
finfo.smem_len = 0x1000000
open_fb1()+++
[Recovery] PIXEL_FORMAT = GGL_PIXEL_FORMAT_RGB_565
using (fd=5)
id = mdssfb_70000
xres = 1920 px
yres = 1200 px
xres_virtual = 1920 px
yres_virtual = 2400 px
bpp = 16
finfo.smem_len = 0x0
The ion mem device is opened successfully.
ION_IOC_ALLOC is successful.
ION_IOC_MAP is successful.
mmap is successful.
installing_text: (1 x 1 @ 1896)
erasing_text: (1 x 1 @ 1599)
no_command_text: (1 x 1 @ 1599)
error_text: (1 x 1 @ 1599)
MSMFB_OVERLAY_SET is successful.
MSMFB_OVERLAY_PLAY is successful.
MSMFB_DISPLAY_COMMIT is successful.
[BL] int main(int, char**): Set backlight
Command: "/sbin/recovery"

af.resampler.quality=4
av.offload.enable=false
mm.enable.qcom_parser=37491
mm.enable.smoothstreaming=true
ro.qc.sdk.izat.service_mask=0x5
ro.qc.sdk.izat.premium_enabled=1
ro.qc.sdk.audio.ssr=false
ro.qc.sdk.audio.fluencetype=fluence
ro.qc.sdk.camera.facialproc=false
ro.qc.sdk.sensors.gestures=true
ro.qc.sdk.gestures.camera=false
ro.qc.sensors.step_counter=true
ro.qc.sensors.step_detector=true
ro.qc.sensors.smgr_mag_cal_en=false
ro.sf.lcd_density=480
ro.com.google.clientidbase=android-asus
ro.com.android.dateformat=MM-dd-yyyy
ro.com.android.dataroaming=true
ro.cpu.id=107b80e1
ro.gps.agps_provider=1
ro.asus.factory=1
ro.boot.emmc=true
ro.boot.baseband=msm
ro.boot.hardware=qcom
ro.data.large_tcp_window_size=true
ro.hdmi.enable=true
ro.hwui.path_cache_size=32
ro.hwui.layer_cache_size=48
ro.hwui.texture_cache_size=72
ro.hwui.gradient_cache_size=1
ro.hwui.r_buffer_cache_size=8
ro.hwui.drop_shadow_cache_size=6
ro.hwui.text_large_cache_width=2048
ro.hwui.text_small_cache_width=1024
ro.hwui.text_large_cache_height=1024
ro.hwui.text_small_cache_height=1024
ro.hwui.texture_cache_flushrate=0.4
ro.wifi.channels=
ro.allow.mock.location=0
ro.board.platform=msm8974
ro.build.id=KOT49H
ro.build.date=Tue Apr 29 12:08:56 CST 2014
ro.build.date.utc=1398744536
ro.build.host=mcrd1-28
ro.build.tags=test-keys
ro.build.type=userdebug
ro.build.user=android
ro.build.display.id=OPEN_PadFone-userdebug 4.4.2 KOT49H OPEN_PadFone-11.9.0.118-20140429-F test-keys
ro.build.product=ASUS-T00D
ro.build.version.sdk=19
ro.build.version.release=4.4.2
ro.build.version.codename=REL
ro.build.version.incremental=OPEN_PadFone-11.9.0.118-20140429-F
ro.build.description=OPEN_PadFone-userdebug 4.4.2 KOT49H OPEN_PadFone-11.9.0.118-20140429-F test-keys
ro.build.characteristics=default
ro.config.ringtone=Ring_Synth_04.ogg
ro.config.alarm_alert=Alarm_Classic.ogg
ro.config.notification_sound=pixiedust.ogg
ro.secure=1
ro.vendor.extension_library=/vendor/lib/libqc-opt.so
ro.bootssn=07c8e1b5
ro.carrier=unknown
ro.product.cpu.abi=armeabi-v7a
ro.product.cpu.abi2=armeabi
ro.product.name=OPEN_PadFone
ro.product.board=MSM8974
ro.product.brand=asus
ro.product.model=ASUS PadFone X
ro.product.device=ASUS-T00D
ro.product.locale.region=US
ro.product.locale.language=en
ro.product.manufacturer=asus
ro.baseband=msm
ro.bootmode=unknown
ro.hardware=qcom
ro.hardware.id=A91_ER2
ro.opengles.version=196608
ro.qualcomm.cabl=0
ro.revision=0
ro.bootloader=unknown
ro.debuggable=1
ro.factorytest=0
ro.use_data_netmgrd=true
dev.pm.dyn_samplingrate=1
log.tag.IMS=DEBUG
mmp.enable.3g2=true
net.bt.name=Android
net.gprs.volte=0
net.early.sockets=0
net.change=net.bt.name
ril.subscription.types=RUIM,RUIM
sys.tcpdump.file=/data/logcat_log/capture.pcap
use.voice.path.for.pcm.voip=true
conn.connectivity_change_delay=0
http.preconnect=false
init.svc.adbd=running
init.svc.healthd=running
init.svc.ueventd=running
init.svc.recovery=running
qcom.hw.aac.encoder=true
rild.libargs=-d /dev/smd0
rild.libpath=/vendor/lib/libril-qc-qmi-1.so
vidc.debug.level=1
wlan.tx.cap=0
audio.offload.buffer.size.kb=32
audio.offload.disable=0
debug.sf.hw=1
debug.egl.hw=1
debug.asus.qxdmlog.emmclog=/data/media
debug.mdpcomp.logs=0
debug.qualcomm.sns.hal=0
debug.qualcomm.sns.daemon=0
debug.qualcomm.sns.libsensor1=0
debug.composition.type=c2d
media.stagefright.enable-aac=true
media.stagefright.enable-qcp=true
media.stagefright.enable-http=true
media.stagefright.enable-scan=true
media.stagefright.enable-fma2dp=true
media.stagefright.enable-player=true
media.aac_51_output_enabled=true
dalvik.vm.heapsize=256m
dalvik.vm.lockprof.threshold=500
dalvik.vm.heapmaxfree=8m
dalvik.vm.heapminfree=2m
dalvik.vm.heapstartsize=8m
dalvik.vm.heapgrowthlimit=128m
dalvik.vm.stack-trace-file=/data/anr/traces.txt
dalvik.vm.heaptargetutilization=0.75
tunnel.audio.encode=true
persist.cne.feature=0
persist.gps.qc_nlp_in_use=0
persist.hwc.mdpcomp.enable=true
persist.sys.pad.dpi=240
persist.sys.pad.width=1920
persist.sys.pad.height=1200
persist.sys.usb.config=mtp,adb
persist.sys.wfd.virtual=0
persist.sys.test.poweronoff=0
persist.sys.modem.restart=0
persist.sys.phone.dpi=480
persist.sys.phone.width=1080
persist.sys.phone.height=1920
persist.sys.dalvik.vm.lib=libdvm.so
persist.sys.logkit.ctrlcode=0
persist.sys.whitelist=/system/etc/whitelist_appops.xml
persist.sys.enableSMMI=2
persist.sys.downloadmode.enable=0
persist.sys.strict_op_enable=false
persist.usb.diag=1
persist.asus.audbg=1
persist.asus.p01dbg=0
persist.asus.qxdmlog.message=0
persist.asus.qxdmlog.sd1mmc0=0
persist.asus.qxdmlog.filesize=100
persist.asus.qxdmlog.maxfiles=6
persist.boot.runfsstress=0
persist.data.netmgrd.qos.enable=false
persist.demo.hdmirotationlock=false
persist.rild.nitz_plmn=
persist.rild.nitz_long_ons_0=
persist.rild.nitz_long_ons_1=
persist.rild.nitz_long_ons_2=
persist.rild.nitz_long_ons_3=
persist.rild.nitz_short_ons_0=
persist.rild.nitz_short_ons_1=
persist.rild.nitz_short_ons_2=
persist.rild.nitz_short_ons_3=
persist.audio.fluence.speaker=false
persist.audio.fluence.voicerec=false
persist.audio.fluence.voicecall=true
persist.debug.wfd.enable=1
persist.radio.calls.on.ims=true
persist.radio.jbims=1
persist.radio.dont_use_dsd=true
persist.radio.add_power_save=1
persist.radio.csg_info_avlbl=1
persist.radio.apm_sim_not_pwdn=1
persist.radio.use_se_table_only=1
persist.timed.enable=true
persist.speaker.prot.enable=false
persist.fuse_sdcard=true
persist.data_netmgrd_mtu=1410
ethernet.interface=eth0
ethernet.autoEnable=yes
keyguard.no_require_sim=true
bluetooth.hfp.client=1
telephony.lteOnCdmaDevice=0
DEVICE_PROVISIONED=1

MSMFB_OVERLAY_SET is successful.
MSMFB_OVERLAY_PLAY is successful.
MSMFB_DISPLAY_COMMIT is successful.
MSMFB_OVERLAY_SET is successful.
MSMFB_OVERLAY_PLAY is successful.
MSMFB_DISPLAY_COMMIT is successful.