yashsingh1/xdaforums huggingface dataset:
[Android Q&A, Help & Troubleshooting] Vampire Lord:
*********Update*********

Ok y'all here's the thing when this is over I'ma smash this thing with a 9. Iron ...... Lol ..... Ok well to get your joytab 2 to access fastboot you must pull your sim card and factory reset the device ... Boot it then connect via adb with the command adb reboot fastboot .... If you use adb reboot bootloader it boots to a weird state where adb is recognized and fastboot is not only it is still mostly functional ... if you didn't know better you would actually think you just booted normally bc the phone boots back up to your main screen ... More weird stuff to come hold on ... Also appearently I've unlocked another boot mode as well called Hboot ... Yea just what I needed a flipping ram boot lol ... Also the version fastboot is apparently a htc 2.0.8 ... So we have a TCL tablet with tct parts .. a MTK chipset with arm7 processors ... Some legacy programming mixed in like a smelting pot in this android 10 update .... Topped off with the easiest SHA256 quallquam provided via crypto encryption I've ever cracked and a bootloader that responds like your ex wife.... That's right I have 2 gigs of info for y'all and still no root lololol lol but I am close and wished I could say hasn't keept me up at night .... Cause it has and I think my wife is about ready to put a hammer to it ..🤣🤣... Btw took a little down time found my old original Amazon Kindle fire 1st gen ... It's rooted now ... Took me 5 min ... Why's this thing so aggravating
[Android Q&A, Help & Troubleshooting] zhoushiyi213:
Glad there's someone that's also intersted on hacking this tablet! I have the exact same 9032z tablet from meropcs. Are you able to unlock the bootloader and root it? Please do share if you are able to hack it - thanks!

I've always been able to access "fastbootd" as shown in your previous picture, by "adb reboot fastboot", with SIM card in and no factory reset. From my experience, "fastbootd" is fastboot mode in recovery environment (something in the ramddisk), and does not contain any unlocking functionalities. However there's a real fastboot environment in the lk.img which has "flashing unlock" in its strings. Luckily this tablet is vulnerable to bootrom exploit (by mtk-bypass or mtkclient) and you can dump partitions with sp flash tool wwr mtk tools. There's only bootrom usb access; I'm not able to get intoto preloader usb so no way to input "FASTBOOT" to get into fastboot.

Btw, do you think it will boot to fastboot in lk.img, if we write 1 into RTC_PDN1_FAST_BOOT and RTC_WRTGR using mtkclient? I've been looking at rn2/ven sources at github, but my tablet is hooked up to our router and not easy for testing these days...
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Not sure I do know there is also a hboot and eboot type adb shell getprop all ... Look at what you find
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Also one time I looked under fastboot getvar all and saw reason for reboot ... Fareboot .... No clue what that was about ... I can't get droid tools to give me a scatter file as it does not recognize the format .. but that's ok this week I plan on slamming a Linux partition on my windows 10 just to slap at this tablet in its own language ... If that don't work I'ma make it sick 😉😉
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Fareboot ??????
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Mk tool no help
[Android Q&A, Help & Troubleshooting] zhoushiyi213:
If you are still trying to get a emmc/partition dump with scatter file I can help. You can run mtk-bypass at bootrom to disable security, then follow the guide here: forum.hovatek.com/thread-21970.html

Two things to keep in mind:

1. You need to specify a preloader file in sp flash tool for it to work. You can get it from its ota update, or use mine attached.

2. At boortom operations it's easy for the processor to freeze. Don't follow their drain battery method; our tablet can be force-reboot to recovery by holding power+volume up for >15 seconds or so.
[Android Q&A, Help & Troubleshooting] Vampire Lord:
We we to connect and compare notes bet we can crack this cookie hit me up on
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Well give me whatever service you Wish to connect on
[Android Q&A, Help & Troubleshooting] Python618:
Eager to hear the results! I have a pair of them I've been wanting to experiment with. Bought them used online and Should be done a little more homework!! The vendor locks are massive!!
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Dude I have so many hours invested in this tablet it's rediculous ... I can get fake root 10 ways and have tried every trick and twist in adb and termux ..this thing is a supermax hogepodge of parts like it was put together with the leftovers from RadioShack and circuit city ... And the rom is literally pieced together from like 6 builds ... I have a folder slap full of every permission.... Restriction.....feature ... Prop ... Spec .. value and file ... And I'm still at the beginning lol .... This has been fun 🤣🤣🤣🤣🤣 ... If I dont have it cracked by Friday I'ma spend sat and sun writing a little cold for it .. see if I can either brick it or else the droid gives up his root ... For a 15.00 tablet I won't mind watching it smoke a little lol either was should be a blast
[Android Q&A, Help & Troubleshooting] Python618:
I did the best I could with mtk and magisk. I have an emmc for preloader. I just hit the same brick wall w/ fastboot. I was honestly considering chemical warfare myself. Please let me know any new news if you would!!! I'd definitely appriciate it sir!!
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Well I have a whole different fastboot and adb now ... Check this out .. win 10 ... Go-to the android sdk site and download the latest platform tools .... It will come in a zip format ... Save to desktop and extract there .. the files will be in its own nice neat folder ... Rename the folder ADB and cut and paste it into your C: drive main screen ... Open the ADB folder and shift + LC in that window and you'll have an unknown fastboot and adb lol bye bye antique htc 2.0.8
[Android Q&A, Help & Troubleshooting] Python618:
What about that stupid hboot???
[Android Q&A, Help & Troubleshooting] Vampire Lord:
hboot is a ram boot believe it or not it used to be an old HTC root exploit ... There's also a eboot ... A fastboot .... Fastboot d ... Edl ... Recovery ... Bootloader ... Norm sys boot ... QuickBoot .... Safeboot .... And wait for it ....... Fareboot .... Yes that's right a fareboot .... Like huh ..... 😂😂😂😂🤣🤣🤣
[Android Q&A, Help & Troubleshooting] Vampire Lord:
********* NEW INFORMATION ******

Found this in my persuit for understanding why I can't find bootloader mode and why in fastbootd hardly any of my known commands work ... Found this info .......

Moving Fastboot to Userspace | Android Open Source Project

source.android.com
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Looks like my tablet will catch a cold after all this weekend 😂😂😂🤣🤣🤣
[Android Q&A, Help & Troubleshooting] Python618:
I admire the clever wording.... Unifying,... Vender specific Hal... I must admit defeat when it's apparent. This is beyond my noobescent skill set!! Lol. Maybe next I'll attempt to fail at this primate of an android head unit I've recently purchased. 7.0 nougat.......... Sorry for cursing!
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Lol @ primate .... I have a Motorola g stylus with android 11 easiest root ever ... The longest part was waiting on Motorola to email me my boot loader key ... Rooting process from boot to root minus the 10 min wait time took a whole 5 min max
[Android Q&A, Help & Troubleshooting] Python618:
This thing is one of the fake android 9 car stereos from binize. It's actually 7.1.1. T3 unit. I went nearly bat $h!t crazy with that os on my old stylo 4. Never tried a radio before but it can't be horrible( famous last words)..
[Android Q&A, Help & Troubleshooting] Python618:
Familiar? Twrp maybe?
[Android Q&A, Help & Troubleshooting] Vampire Lord:
I've tried to sideload...fastboot boot .... Flash ... Force flash .. edl .. twrp ... Can't get it to accept it ...
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Without the bootloader unlocked and no usable root exploit other then termux proot this things nothing more then a glorified paper weight
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Dude if I'm not mistaken that's an allwinner Chinese tossup tablet ... Should be plenty out there on it
[Android Q&A, Help & Troubleshooting] Python618:
You are 100% correct on the allwinner tablet/radio.. Im saddened to hear the turn on the Alcatel though. I had high hopes for the two I bought. I was more than convinced you were going to rise victorious too!!! Awesome dedication though man! Good stuff!
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Oh dude I havnt given up gotta root my wife's umx then IMA go back to it .... How do you think all the other exploits came about ... This war against this HAL tech has just begun .... Mwahahaha ....< Evil laugh>
[Android Q&A, Help & Troubleshooting] Python618:
Any luck vampire?? I've all but set this thing on fire!!
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Well mine found fire soo we covered all basis lol
[Android Q&A, Help & Troubleshooting] Vampire Lord:
Naw seriously tho this things a brick s$+#* house ... That has a chastity belt on ... On the viral exploit front ... I've managed to mangle some files here and there but nothing permanent .. and a fact res fixes that quick like and in a hurry I finally got good and aggravated and hit this thing trying to wipe it and back up .. no dice ... Shrugged it off like an unwanted hug ... Even showed it my ex wife's pic ... It almost rooted itself out of pitty after seeing her pic but still .. nope ... I'm stumped bro ... I've even exhausted all my current knowledge of terminal only to find out the only 2 methods there that work is temp and fake .... Proot and umbuntu ... Waste of time really ... I even downloaded a script to add adb and fastboot to terminal ... Wifi USB debugged with my rooted Motorola g stylus with android 11 and loaded with any manipulation accessory I could think of and over 200 loaded terminal and termux scripts ... Came back cleaner then nun after baptism .... Dude I sat there 17 hrs straight smashing this thing with every virus I've helped identify and destroy for past customers and every exploit and entry both legit and off the records so to speak .... This thing is a flipping Pentagon designed tank with a air force 1 security ... Which mine will no longer upgrade on the security any longer .... That's the only permanent damage it took ... I'm flipping mad as heck and impressed at the same time ... 15.00 tablet. .... If they knew just what it could take they would be selling it for 1500 not 15
[Android Q&A, Help & Troubleshooting] Python618:
Naturally I have the nemesis of tablets... I've managed to at least frp bypass mine and I even GSM unlocked the wife's. Although mine is being resistive on that idea.
[Android Q&A, Help & Troubleshooting] CTH-EVO:
OK. I'm confused. I have an Alcatel JOY TAB 2 (TMO). I went to the System settings and set OEM unlock to TRUE, and then powered it off. Then held the VolumeUP+PWR till the Alcatel logo appeared and let go. It's in now in Android recovery. Isn't this what's needed, to load a rooted (unlocked) bootloader? Can it really be this easy to root?
[Android Q&A, Help & Troubleshooting] Python618:
It's not. I certainly wish it were!
[Android Q&A, Help & Troubleshooting] donthateme702:
You guys know that under developer options there is option to unlock bootloader. Does this make any difference

when trying to root?
[Android Q&A, Help & Troubleshooting] zhoushiyi213:
Hey good news - bkerler includes a new function in his awesome mtkclient tool: seccfg in stage2. According to the description this generates unlock seccfg.bin for the device. While there are still some bugs in the script combining the binary strings, it does generates similar format to the original, locked seccfg.bin I pulled from my 9032z, after fixing some of the bugs. I haven't got a chance to test yet since my tablet provides the internet for my home, just to post here to provide possible direction :-)

By the way messing with memory write for RTC_PDN1_FAST_BOOT and RTC_WRTGR doesn't making anything different, assuming RTC_BASE is at 0x4000.
[Android Q&A, Help & Troubleshooting] zhoushiyi213:
Good news, it is root-able now!

Thanks to bkerler, mtkclient can successfully unlock and root this tablet. I followed the steps at his github repo and it worked without a problem! Cheers!

By the way I'm using the February ROM during the process.

The only glitch: "mtk reset" doesn't actually reboot the phone; long-press (~20 seconds) volume-up and power twice to reboot to recovery and you can reboot from there.
[Android Q&A, Help & Troubleshooting] MattchuBlean420:
Can anyone verify this? Might try later
[Android Q&A, Help & Troubleshooting] Cruel5anity:
How did you bypass secure boot?
[Android Q&A, Help & Troubleshooting] Cruel5anity:
how did you disable verified boot?
[Android Q&A, Help & Troubleshooting] MattchuBlean420:
If you have Magisk installed and everything, I believe there is a way
[Android Q&A, Help & Troubleshooting] Alain+:
Has anyone tried to dump all partitions with the miracle box or with the NCK box? Sometimes when attempts with SPFT fail I have to use these alternatives, although there are so many other tools, these two are my favorites. Unfortunately I do not have this device, it belongs to a boy who needs it for his studies and also because of his visual difficulties, imagine any mistake would be fatal.
[Android Q&A, Help & Troubleshooting] graffix420:
Is there any way to recover this tablet? I took a backup before messing with it, but now it's not booting. I can see the device, but there are apparently no partitions on it, mtkclient can't see any. I had magisk installed, but modules had stopped working, so I was trying to reset/reinstall.
[Android Q&A, Help & Troubleshooting] akadriu:
This model the only way to work with would be to unlock the bootloader in brom mode. make a full system dump on said status and then maybe can use magisk to patch the boot.img.

i have a couple of these 9032z and 9032w (metro and t-mobile respectively) I have gone so far to unlock bootloader dump nvram data but there's no way to patch this device for me so far.
[Android Q&A, Help & Troubleshooting] Python618:
I do believe there was an available emmc/partition dump and scatter file floating around if that helps.. Someone posted a guide on hovatek on the first page in this thread. Maybe you can use this img file to try a patch as well.
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Okay, I snooped a little bit, it's the kernel we need to make a twrp and apparently you can unpack the boot.img to get the kernel... I am confirming working root rn. I got smartpack off of f-droid... If we can use the kernel from boot.img to create an unofficial twrp can we flash it with smartpack?
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Recovery is dev/block/mmcblk0p15

Gonna try to pull it the same way I pulled the boot img with mtk tools...
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Dumping partitions now
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Trying to port twrp

Got to the step where I'm editing twrp.fstab with contents of recovery.fstab

Need advice...

TWRP.fstab is from a different device, and I don't know equivalents to some of the partitions....

Do I delete those and write in the partitions from recovery.fstab?
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Took method 2 copy/pasted the partitions from recovery.fstab and formatted like the rest... Imma pray this works
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Bootloop
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Rescued with mtk client tools

Anybody with proper experience making twrp recoveries wanna take a crack? It dumped recovery.bin but the Android image kitchen unpacked it and it has most of the needed files...
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Got i to boot with the custom recovery installed but it won't boot to the custom recovery... Just bootloop s...
[Android Q&A, Help & Troubleshooting] Python618:
Did you run into that fairboot problem?
[Android Q&A, Help & Troubleshooting] Cruel5anity:
Got i to boot with the custom recovery installed but it won't boot to the custom recovery... Just bootloop s...

Is that the one where it bootloops at the twrp logo? Cuz if it is I never even saw the twrp logo.
[Android Q&A, Help & Troubleshooting] NoJoyTab2:
You men have been very enthusiastic. I applaud your know-how-to. 👍

But please, if you haven't bashed it with a 9 iron, killed it with a covid varient or incinerated your Joy Tabs, don't give up. I only want to simply Manually Focus my cam. I don't speak y'alls lingo, but I get the jest. After following mtk instructions I have ceased at: My firmware is not old enough and I need to downgrade.

Thank you, all! I'll be watching. 😲😂😢
[Android Q&A, Help & Troubleshooting] Python618:
It has an hboot which is a ram boot, an eboot which I dont remember what that does. Then the fareboot which I think is the "set me on fire" boot loop your getting. Oh and vendor specified Hal.. So far mtk tools have been a bust, and and fast boot go about as far as we all are now.. We need Vampire Lord back on this thing. That dude was a savage! And fully prepared to reverse engineer that entire o.s. I believe!!
[Android Q&A, Help & Troubleshooting] PKZ22:
how can i flash boot img i tryed rooting witgh majisk and bootloop and cant get into recovery or fastboot idk what too do.. wont let me brom mode either it just keeps restarting no matter what button combo is used
[Android Q&A, Help & Troubleshooting] Cruel5anity:
This tablet needs the modded version of majisk. Regular majisk won't work. They have a half decent tutorial on the mtkclient tools GitHub: MTKClient
[Android Q&A, Help & Troubleshooting] Alain+:
What are the steps you used to create the TWRP port?

I need a link to download the stock recovery, I would also like to try creating a port.
[Android Q&A, Help & Troubleshooting] Cruel5anity:
The beginning of this thread are the steps I followed, I have root so I was able to use the TWRP app to dump recovery image. I'll try grabbing a copy of stock recovery image when I get home.
[Android Q&A, Help & Troubleshooting] GhostBoy401:
I was able to root it. Do you need me to make a tutorial?
[Android Q&A, Help & Troubleshooting] PKZ22:
plz do
[Android Q&A, Help & Troubleshooting] GhostBoy401:
@PKZ22 Okay, When I get home from work I will make a YouTube video about it.
[Android Q&A, Help & Troubleshooting] Python618:
May I have a link to that video!!
[Android Q&A, Help & Troubleshooting] PKZ22:
dose anyone have a full system dump of the stock os
[Android Q&A, Help & Troubleshooting] graffix420:
I also need a dump. In my attempts to update I have bricked the device. I can see the device, but no partitions are recognized.
[Android Q&A, Help & Troubleshooting] PKZ22:
just make a dump of urs and i got the boot partition
[Android Q&A, Help & Troubleshooting] graffix420:
I have a dump that I think I took properly before it bricked, I just don't have the file that has the layout, I think.
[Android Q&A, Help & Troubleshooting] PKZ22:
send it to me somehow
[Android Q&A, Help & Troubleshooting] graffix420:
sent a pm
[Android Q&A, Help & Troubleshooting] PKZ22:
ty ill send u an update to help with ur device after im done
[Android Q&A, Help & Troubleshooting] PKZ22:
i need the nvdata.bin for my internet top work
[Android Q&A, Help & Troubleshooting] Metalheadx:
I'll try to get this to you when I get home if you haven't already found another.
[Android Q&A, Help & Troubleshooting] Alain+:
Guys, why don't you create a group on Telegram or another site regarding this device?
[Android Q&A, Help & Troubleshooting] graffix420:
I have one of these devices, mtkclient doesn't see any partitions, I accidentally formatted it. I have a backup I took beforehand, but I can't figure out how to restore it. I sent my backup to PKZ22, but I haven't heard back. Can you help?
[Android Q&A, Help & Troubleshooting] graffix420:
I should add, I backed up the individual partitions, not the full flash, if I had the full flash I suspect I could restore it without issue.
[Android Q&A, Help & Troubleshooting] Metalheadx:
The partition structure is weird with this tablet, I haven't screwed myself bad enough yet that I would need to restore any of the partitions. I'm still out of town till Tuesday for business and the tablet is at the house, as soon as I get back I'll get to work and see what I can do for you.
[Android Q&A, Help & Troubleshooting] graffix420:
Thanks so much, you're awesome! I haven't dealt with flashing android in several years, I think if I had a full flash backup I would be ok. Unfortunately, all I have is the "out" folder produced by mtkclient, that contains the individual partitions in binary format.
[Android Q&A, Help & Troubleshooting] Alain+:
By the way, has anyone managed to unlock the network? As much as I tried some time ago, I could not get the chip from another provider to accept me
[Android Q&A, Help & Troubleshooting] Alain+:
I think any traditional method of flashing, rooting or customizing with this tablet will be a bit complex/tedious, resulting in both Android experts and novices pulling their hair out for endless hours, including me. 🤣🤣
[Android Q&A, Help & Troubleshooting] pkz420111:
Your backup is the wrong version for me I need the MetroPCS veriant
[Android Q&A, Help & Troubleshooting] graffix420:
Ouch, if I see one on fb marketplace I'll grab it and back it up.
[Android Q&A, Help & Troubleshooting] pkz420111:
Hell yea ur the ****
[Android Q&A, Help & Troubleshooting] PKZ22:
any chance u gotg the metropcs dump of this rom
[Android Q&A, Help & Troubleshooting] MemeSandwich:
Does there exist any full, comprehensive guide to rooting this thing?!?
[Android Q&A, Help & Troubleshooting] itsjustarainyday:
Did this ever get made? Would love to contribute in any way. I noticed a comment in this thread mentioning a video showing the process but that account never follow through. I found a youtube page under that handle with 0 uploads. I would be willing to showcase the procedure once it's dialed in.
[Android Q&A, Help & Troubleshooting] Prunkle:
First: I am not worthy!!! 😲

Second: this is almost newsworthy. A true Frankenstein's monster of technology. As much as I agree with the 9 iron, I find myself falling in love with the tenacious little bastard. 😂
[Android Q&A, Help & Troubleshooting] Prunkle:
Take my money.
[Android Q&A, Help & Troubleshooting] nateberhardt81:
I just read/dumped everything off of my metro variant. The full flash and every individual partition. If I can figure out how to share the files I'll get it up here later tonight or tomorrow.
[Android Q&A, Help & Troubleshooting] Python618:
Ive been trying to share a scatter and a stock ROM myself and without a personal email or sharing access on Google drive it's near impossible!
[Android Q&A, Help & Troubleshooting] pkz420111:
Can u share it with me my email is tyoakley87@gmail.com
[Android Q&A, Help & Troubleshooting] Python618:
Absolutely
[Android Q&A, Help & Troubleshooting] pkz420111:
Did u ever send that because I need to get my tablet fixed for my kids
[Android Q&A, Help & Troubleshooting] jayleemcnabb81:
Please share the 9032w file. I'm new to this depth of Android, but familiar with unlocking bootloader and rooting.

jayleemcnabb81@gmail.com
[Android Q&A, Help & Troubleshooting] Skv012a:
Just scrobbed through the thread - you guys are brilliant maniacs and this crappy tablet is definitely wild to still be unrooted after all this time.
[Android Q&A, Help & Troubleshooting] Greyjoe:
Everyone I have successfully unlocked the bootloader attempting to root now
[Android Q&A, Help & Troubleshooting] Python618:
God speed soldier! Let me know if I can help.