Wolf's ultimate flash and downgrade guide (NO ROOT NEEDED) (root opportunity for .21)

Search This thread
By:
Advanced…
Thing O Doom

Thing O Doom

Senior Member
Mar 10, 2012
1,529
747
Phoenix
I made a one click that works using method 3's exploit called PERI, it's a few posts down, and has worked AFAIK 100% from stock to rooted on the tf101 tf101g and slider.
 
  • Like
Reactions: balrog558
balrog558

balrog558

Senior Member
Apr 11, 2012
224
56
I read your peri post it seems so damn easy that I'm going try it on my brother's tablet when he gets home and ill use it on mine when I get it in a few weeks.

Sent from my CM9 Nook Tablet using Tapatalk
 
emokidjj

emokidjj

New member
Dec 27, 2010
1
0
a lil help?

super user command runs, but dd command doesn't, I think I need a moron proof method -w- or just a little help with the commands
 
I

idcrisis

Senior Member
Aug 30, 2010
1,428
5,742
Hi,

Just an update you guys, I had a method lying around to automate the whole 'Method 3' thing, including the return to stock Asus recovery.

So I wrote it up as a tool for complete automated unattended 1-click root on Transformers.

Various advantages of this method and the tool itself is described here:

http://xdaforums.com/showthread.php?p=26918790

In this 1 step process, you effectively gain root without losing data or the ability to get OTA updates.

I have used a variation of Wolf's exploit to apply it to other partitions, thus allowing for a complete automation.

I believe this can be extended to a generic automated ICS exploit tool as this seems to be an ICS problem, but's probably a far way off. Currently it's only for the TF101(G) and not the Prime.

Do feel free to use it and give your feedback.

It's most welcome.
 
Last edited:
C

Co0n

Member
Jan 10, 2012
49
2
Hey there!

About the firmware version: I have a DE version (not US or WW), does this still work? Do I use the US or the WW firmware for downgrading? If I need a particular DE version, where can I get it?
 
I

idcrisis

Senior Member
Aug 30, 2010
1,428
5,742
Co0n said:
Hey there!

About the firmware version: I have a DE version (not US or WW), does this still work? Do I use the US or the WW firmware for downgrading? If I need a particular DE version, where can I get it?
Click to expand...
Click to collapse

This still works. You can use a WW for downgrading, but why do you want to? use Method 3 and stick back stock Asus recovery.

TF101, you can use the latest WW version, Asus has merged DE into WW from this version - V9.2.1.24(WW)

TF101G, you can use V9.2.2.4(DE special)

You can get it from the official Asus site and extract the blob from the ZIP.

If you need the Asus recovery for DE firmwares, you can download them from http://xdaforums.com/showthread.php?p=26918950#post26918950
 
C

crazytimmy96

New member
Feb 25, 2012
2
0
Help!!!

while i was doing method two, when it says, "dd if=/sdcard/blob of=/dev/........"
the output comes out as "/sdcard/blob is not able to be read: unable to find file" or something like that. I have the blob file on the base of my sdcard, but for some reason it wont be able to be read. please help. :confused:
 
C

crazytimmy96

New member
Feb 25, 2012
2
0
same problem

emokidjj said:
super user command runs, but dd command doesn't, I think I need a moron proof method -w- or just a little help with the commands
Click to expand...
Click to collapse

hey, i have the same problem, i have not fixed it yet sorry. if you figure out how, can you message me?

---------- Post added at 04:30 AM ---------- Previous post was at 04:25 AM ----------
Thing O Doom said:
is there a file extension? that breaks it.
Click to expand...
Click to collapse

i dont think so. i am not really sure how that would work though because i cant seem to find any extension or the file being an extension. or am i looking at it in the wrong way?

---------- Post added at 04:51 AM ---------- Previous post was at 04:30 AM ----------

While i was reading though some of the past replies somewhere on page 11-15, i found out that the file has to be on the device, not an external memory like the sd card. well, im testing it now, and it seems to run perfectly. Ill update you guys if it worked on not.

EDIT:i was able to get it back to .17 and root it, and get it back to .29 without a problem. TYSVM Wolf
 
Last edited:
P

pkfox

Senior Member
Jan 26, 2012
240
14
London
crazytimmy96 said:
while i was doing method two, when it says, "dd if=/sdcard/blob of=/dev/........"
the output comes out as "/sdcard/blob is not able to be read: unable to find file" or something like that. I have the blob file on the base of my sdcard, but for some reason it wont be able to be read. please help. :confused:
Click to expand...
Click to collapse
Hi there, post the output of this command ( in terminal ) ls -la /sdcard/
 
C

Co0n

Member
Jan 10, 2012
49
2
idcrisis said:
This still works. You can use a WW for downgrading, but why do you want to? use Method 3 and stick back stock Asus recovery.

TF101, you can use the latest WW version, Asus has merged DE into WW from this version - V9.2.1.24(WW)

TF101G, you can use V9.2.2.4(DE special)

You can get it from the official Asus site and extract the blob from the ZIP.

If you need the Asus recovery for DE firmwares, you can download them from http://xdaforums.com/showthread.php?p=26918950#post26918950
Click to expand...
Click to collapse

Excuse me, I forgott to mention that I have a Prime. >_<
Found a DE version on the internet anyways, sorry for the confusin
 
B

billy197302

Member
Sep 26, 2008
10
0
BiggJurk said:
I just bought my TP and it came with .21, I was discouraged when I started reading XDA that ViperMOD wouldn't work with .21 Luckily I found this post and it worked like a charm. I would suggest adding this to ViperMODs post for those of us stuck with .21, or start a new guide and sticky this for us noobs.
Click to expand...
Click to collapse
Right im a complete novice, my prime is running .21 and is painful slow! So i unlocked the boot loader hoping this would allow me to install a custom rom. But now i cant as i need root. So how can i downgrade and gain root and then start over again? Will this one click method work for me?

Please help
 
jays473

jays473

Senior Member
Feb 24, 2012
168
28
just curious will method 2 or 3 work on the latest update for tf101 9.2.1.24
 
P

phigafr

Senior Member
Jun 12, 2009
93
3
hello,
is it possible to go deeper in details for Method 3?

1. Upload the RECOVERYBLOB file to internal storage of your tab. (mounted as /sdcard) (don't have any file as such)
2. Connect tablet to the computer and start ADB shell session.

What is "ADB shell session"?
 
DONNY TRUMP

DONNY TRUMP

Senior Member
Oct 27, 2010
312
47
Your moms house?
jays473 said:
just curious will method 2 or 3 work on the latest update for tf101 9.2.1.24
Click to expand...
Click to collapse

I got it working with method 3 on my .24 I was having trouble at first with the last "dd" command aka step #5 but then I figured out that I had to put the recoveryblob on the root of the phone memory and not the actual physical microsd card...which was my mistake as I misread the instructions. after I figured that out everything was a breeze.

---------- Post added at 10:46 PM ---------- Previous post was at 10:44 PM ----------
phigafr said:
well, no devices detected...but I can browse it

will wait an apk to root my TF201 later on..
Click to expand...
Click to collapse
Well if you can browse it then you should be able to detect it, but reading your earlier post, should we assume you're not familiar with ADB? Just youtube it, im sure there are a few videos on how to get ADB working.
 
You must log in or register to reply here.

Similar threads

I
  • Poll
[TOOL]"1-Click Transformer Root"-Root/Unroot/cwm/stock rec-TF101(G)/201/300T(G)/SL101
Replies
801
Views
654K
M
mr_fosi
T
[INFO] US Retail Availability (for Updates on Preorders and Purchasing)
Replies
11K
Views
1M
B
Bob Smith42
Thing O Doom
[TOOL]PERI-0.42 One click root+recovery/fix-bootloops+soft-bricks ALL Devices+.27! :D
Replies
630
Views
346K
D
dieggoguitarrista
samcaplat
How to Root the ASUS Transformer
Replies
299
Views
194K
T
tripranav
B
[GUIDE] 720p Handbrake preset for TF101 (HC3.1 Update)
Replies
371
Views
181K
L
Lethe6

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 192
    W
    wolf849
    WARNING

    This method will not work on any JB rom available, apparently google has patched the exploit.​

    Note that downgrading method for unrooted devices is highly experimental and may turn your device into worthless brick. Read this WHOLE thread carefully before you start doing anything with your Transformer.

    MOD EDIT: It is reported that this method doesn't work with the new Jelly Bean firmwares on the TF201 and the TF300T,

    Sorry, but I will not be able to support you between 3rd and 15th of May because I have to pass my final exams.
    However feel free to post your questions in this topic I am sure that somebody will be able to help you.    ​
    Click to expand...
    Click to collapse
    Description​
    Method 1 - Rooted Devices
    This method allows you to flash any update released by ASUS without need for custom recovery.
    ROOT is required to unlock mmcblk0p4 write access for dd.

    Method 2 - UnRooted Devices
    This method allows you to flash any update released by ASUS, no mater for SKU etc.
    It uses file linking trick to unlock mmcblk0p4 write access even when su is not present.

    Method 3 - UnRooted Devices - Recommended
    This method allows you to directly flash the recovery even on unrooted device. This may be used next to root your TF by prepared su package.
    It uses file linking trick to unlock mmcblk0p4 write access.
    Click to expand...
    Click to collapse
    Disclaimer​

    Despite both methods have been confirmed (by myself) to work, the whole process of flashing mmcblk0p4 with dd brings high risk of bricking device by for example file system corruption.

    I do not take any responsibility for damaged or bricked devices. Before flashing you have to assume the risk and chances of geting bricked.

    Under no circumstances should you brake cmd during blob file is flashed by dd. If that happens do not reboot. PM me and go on IRC
    Click to expand...
    Click to collapse
    Requirements​


    • BLOB file (look at links box at the bottom for few)
    • ADB enabled
    • Root acces (only method 1)
    Click to expand...
    Click to collapse

    Notes​
    Sorry for the mistakes, but English is not my native language PM me if you find any so I will be able to correct them.

    Before posting a question look into FAQ maybe it have been already answered.

    Guide is inspired by Turge who wrote similar article for TFP (link here). However whole 2nd method was invented and described by me.

    Thanks go to:
    Code: 
    [CENTER]
AndroidRoot.mobi - for RazorClaw
ViperBoy - for viperMOD rooting tool
jcase - for NachoRoot
sparkym3 - for his ICS rooting methods
Roach2010 - for all his work
sbiriguda - who inspired me to dig around symlinking
[/CENTER]
    Click to expand...
    Click to collapse

    Instructions - Method 1 - Rooted​
    1. Upload the BLOB file to internal storage of your tab. (mounted as /sdcard)
    2. Connect tablet to the computer and start ADB session.
    3. When you will be in adb shell execute following comands:
    Code: 
    su
dd if=/sdcard/blob of=/dev/block/mmcblk0p4
    4. The command prompt will be empty as wnen nothing happen, do not panic wait until the end of the process. DO NOT INTERRUPT (it will take apx.3-10 min)
    5. When you see the following message:
    Code: 
    1066806+1 records in
1066806+1 records out
546204969 bytes transferred in 250.309 secs (2182122 bytes/sec)
    (the numbers in resulted message may be diffrent but it has to have the same structure)
    You can safety reboot the device by exiting shell and executing :
    Code: 
    adb reboot
    6. Once rebooted you will see ASUS EeePAD flashing progress bar. Be patient and wait till the end.
    7. Tablet will reboot itself and start loading new system. (as it is first boot it may take few minutes)
    8. Be happy from your new firmware.

    ADDITIONAL OPTIONAL STEP

    In some cases flashing previous firmware leaves data partition intact.
    I suggest to clean it by booting with [vol down] and [power] pressed (you will see the info about the rom). Than wait until the screen with android and wipe data appear. Select wipe by switching with [vol down] and accepting with [vol up] pressed two times. It mostly happen when downgrading to HC from ICS.
    Click to expand...
    Click to collapse

    Instructions - Method 2 - UnRooted​
    1. Upload the BLOB file to internal storage of your tab. (mounted as /sdcard)
    2. Connect tablet to the computer and start ADB shell session.
    3. When you will be in adb shell execute following commands:
    Code: 
    mv /data/local/tmp /data/local/tmp.bak
ln -s /dev/block/mmcblk0p4 /data/local/tmp
exit
    4. Now reboot your tab through:
    Code: 
    adb reboot
    5. Once you see ASUS loading screen you should be able to start ADB shell session again (if not just wait), than (in shell) execute:
    Code: 
    dd if=/sdcard/blob of=/dev/block/mmcblk0p4
    6. The command prompt will be empty as wnen nothing happen, do not panic wait until the end of the process. DO NOT INTERRUPT (it will take apx.3-10 min)
    7. When you see the following message:
    Code: 
    1066806+1 records in
1066806+1 records out
546204969 bytes transferred in 250.309 secs (2182122 bytes/sec)
    (the numbers in resulted message may be diffrent but it has to have the same structure)
    You can safety reboot the device by exiting shell and executing :
    Code: 
    adb reboot
    8. Once rebooted you will see ASUS EeePAD flashing progress bar. Be patient and wait till the end.
    9. Tablet will reboot itself and start loading new system. (as it is first boot it may take few minutes)
    10. Be happy from your new firmware.

    ADDITIONAL OPTIONAL STEP

    In some cases flashing previous firmware leaves data partition intact.
    I suggest to clean it by booting with [vol down] and [power] pressed (you will see the info about the rom). Than wait until the screen with android and wipe data appear. Select wipe by switching with [vol down] and accepting with [vol up] pressed two times. It mostly happen when downgrading to HC from ICS.
    Click to expand...
    Click to collapse

    Instructions - Method 3 - UnRooted

    This will definitely not work with Transformer Prime continue only if you are owner of TF101 of TF101G​

    1. Upload the RECOVERYBLOB file to internal storage of your tab. (mounted as /sdcard)
    2. Connect tablet to the computer and start ADB shell session.
    3. When you will be in adb shell execute following commands:
    Code: 
    mv /data/local/tmp /data/local/tmp.bak
ln -s /dev/block/mmcblk0p4 /data/local/tmp
exit
    4. Now reboot your tab through:
    Code: 
    adb reboot
    5. Once you see ASUS loading screen you should be able to start ADB shell session again (if not just wait), than (in shell) execute (some times it gets longer, but do not panic it is normal):
    Code: 
    dd if=/sdcard/recoveryblob of=/dev/block/mmcblk0p4
    6. The command prompt will be empty as when nothing happen, do not panic wait until the end of the process. DO NOT INTERRUPT (it will take apx.3-10 min)
    7. When you see the following message:
    Code: 
    8860+1 records in
8860+1 records out
4536396 bytes transferred in 1.718 secs (2640509 bytes/sec)
    (the numbers in resulted message may be different but it has to have the same structure)
    You can safety reboot the device by exiting shell and executing :
    Code: 
    adb reboot
    8. Once rebooted you will see ASUS EeePAD flashing progress bar. Be patient and wait till the end.
    9. Tablet will reboot itself and start loading new system. (as it is first boot it may take few minutes)
    10. Be happy from your new recovery.

    ADDITIONAL - ROOTING

    11. Download this SU + Superuser.apk package and place it on internal memory or microsd
    12. Boot to recovery. (turn off your TF and than boot with [vol down]+[power] pressed, once you see the letters identifying the system press [vol up]
    13. Now you should be in custom recovery. Select 'Install from zip file' and then select the file on desired location internal or external.
    14. Once flashing is done go back and select 'Reboot system'
    15. Now you got freshly rooted Transformer. ENJOY
    Click to expand...
    Click to collapse

    BLOBs​

    BLOB file can be extracted from any update file. It is contained inside XX_epad-user-x.x.x.x.zip achive. Where XX (e.g WW or TW) refers to SKU of firmware and x.x.x.x to its version (e.g 9.2.2.3)

    Or you can pick up a few here ;)

    Now they are ziped to reduce the sizes (MD5 value shows the control sum of each blob not zip) (sorry for hostings but I don't have space on dropbox any more, you may register to increase) (if you know faster mirror PM me)

    NEW MIRROR SITE WITH ALMOST ALL FIRMWARES HERE

    TF101/G BLOBs (Transformer)

    Honeycomb

    WW 8.6.6.19 - MD5: D63D60F6C71F5B614B338244D3788735 - or mirrors (1 2)

    WW 8.6.6.23 - MD5: 1227F19BC4415661CACB05A483504953 - or mirrors (1 2)

    Ice Cream Sandwich

    US 9.2.1.11 - MD5: 4F6069430B20C35C8833F50DFA0FE0FD - or mirrors (1 2)

    WW 9.2.1.17 - MD5: 5C78C28C31888943AB67CCE4B4448319

    US 9.2.1.17 - MD5: 380CA6399374FF5F84154509365A83F7 - or mirrors (1 2)

    TW 9.2.1.17 - MD5: CA52E4AD670DFFA29DC1CBA04A0A4164 - or mirrors (1 2)

    WW 9.2.2.3 - MD5: 5D5A44069346C4D7D2740E4100520692 - or mirrors (1 2)

    TW 9.2.2.3 - MD5: pending


    TF201 BLOBs (Transformer Prime)

    Honeycomb

    WW 8.8.3.33 - MD5: 5136E579FAEDDFE15F6AAE623B6CB67D - (or mirrors 1 2)

    Ice Cream Sandwich

    WW 9.4.2.11 - MD5: B2668A3387924B19A91F74ABF5DBE4E8 - (mirror)

    US 9.4.2.14 - MD5: EF2E635BD6921BFA9D01FC0E4DD0644B - (mirror)

    WW 9.4.2.15 - MD5: 55122257B30E9376DF463F3C1A8BA702 - (or mirror 1 )

    WW 9.4.2.21 - MD5: 1129DC2643BD0F5DC6C07B9A1B619548 - (or mirror 1 )

    RECOVERYBLOBs (only for TF101)

    Rburrow's Rogue XM Recovery (mirror) - MD5: 6EE759A84ED02F0D95A029EC245CFDC5 - thread
    ​
    Click to expand...
    Click to collapse

    Hope it will help
    Results​
    Confirmed to work on both TF101/G (ASUS Transformer) and TF201 (ASUS Transformer Prime)

    However keep in mind that TFP have to be locked in order to use second method otherwise you may brick your device.


    It probably can be used with slider as well :)

    I also confirmed that it is possible to root any official OTA (on TF101/G) by flashing recoveryblob containing custom recovery and than update.zip with su and superuser app.

    Proven that Method 2 also work with 9.2.1.21 update to downgrade the software and reroot device. - thanks alvin612.

    Method 2 may also work on locked Transformer Prime however be careful and read warning and disclaimer in this thread.
    Click to expand...
    Click to collapse

    Click 'Thanks' if I helped you ;)
    View
    14
    bpear96
    bpear96
    *THIS TOOL IS USING WOLF'S 2nd method of downgrading, this is Viperboys one click tool, I modded to add Wolf's downgrade*

    ONE CLICK Downgrade, using Wolf's method and root tool (thanks to viperboy)
    ​
    I modded ViperMods awesome prime tool, to add an option to one click downgrade, using wolf's no root method :D. Just put the blob of FW you want to go to on the root of your primes internal memory, then run option 1 on my modded vipermods tool :D

    99.9% credit go to -Viperboy- and Wolf849 :D i just added option in viperMOD's tool

    EDIT: Fixed error in script

    Download:
    https://docs.google.com/uc?id=0B8gHyfs-S25Lal9KOWFQbWtzalE&export=download

    http://205.196.122.126/9jvynozv3cpg...MOD+Primer+Tool+v4.5+-+Modded+by+bpear_v3.zip (mediafire direct link)

    http://d-h.st/KrP

    *NOTE* this is using Wolf's method 2 which is confirmed to work on prime, im not sure about tf101 etc. from here http://xdaforums.com/showthread.php?t=1622628

    Mirrors of WW and US .15 blob (TRANSFORMER PRIME): you have to extract the .zip, possibly twice, then there will be a blob file, put that on /sdcard
    http://xdaforums.com/showpost.php?p=25503960&postcount=47
    View
    3
    sbiriguda
    sbiriguda
    Let me just say this: you are a freaking genius. I didn't even think of symlinking /dev/block/mmcblk0p4 to /data/local/tmp so it would change ownership and permissions on reboot. This is f*ing brilliant!

    Moreover, if you have a blob for CWM you can also use the second method to install it on an unrooted device and then root it using the customary update.zip with su and superuser.apk (yes, even on 9.2.2.3 TF101Gs).

    Again, great job! ;)
    View
    3
    W
    wolf849
    FAQ

    I'm confused, which BLOB file should I choose?

    You have to choose BLOB with the firmware you want to install e.g. if you are on 9.2.2.3 and want to downgrade to Honeycomb just choose BLOB file from 8.6.6.19 or 8.6.6.23


    Wolf help something happened to my tab, it wont boot up.

    If you let dd to finish all its job and after reboot you saw the flashing bar, but your ROM still don't want to boot up you have probably downgraded from ICS to HC. Just do the wipe by booting with [vol down] and [power] pressed (you will see the info about the rom). Than wait until the screen with android and wipe data appear. Select wipe by switching with [vol down] and accepting with [vol up] pressed two times. Than everything should be fine.


    I'm stuck on step 3 all the time I have message like -> failed on '/data/local/tmp' - Not a directory <- What should I do?

    It means that you have already symlinked something to /data/local/tmp and moved your previous tmp to tmp.bak. To fix that you can either execute:
    Code: 
    rm /data/local/tmp.bak
    or:
    Code: 
    mv /data/local/tmp /data/local/tmp.mad
    and repeat procedure.


    Can I root the latest firmware and keep my data untouched?

    Yes, on both TF and TFP. For TF101 use method 3.
    For TF201 backup your data with ASUS Backup utility, than do a downgrade, root and install OTA ROOT Keeper from Voodoo. After that update OTA and recover your root and data.


    Can this method be used to root TF301? (aka EeePAD Infinity)

    Unfortunately no, it only allows us to do a step back without root permissions and than apply a root. However I'm still working around ASUS Backup App as I have an idea of exploit (but not enough time to study apk more). If you are interested in this consider donation as I don't have access to any TF301 and that would speed up the researches.
    View
    3
    bpear96
    bpear96
    Mirrors of US .15 blob

    Here are some mirrors i made of WW and US .15 blob

    Mirrors of US .15:
    http://drivers.softpedia.com/get/JO...ansformer-Prime-TF201-Firmware-94215-US.shtml ( not mine obviously :D)
    http://d-h.st/hGK
    https://docs.google.com/open?id=0B8gHyfs-S25LQm9ITDN1QTZERm8
    http://bitshare.com/files/3gv5mo0z/US_epad-user-9.4.2.15.7z.html
    https://www.rapidshare.com/files/3563516501/US_epad-user-9.4.2.15.7z
    http://d01.megashares.com/dl/qsnrY5y/US_epad-user-9.4.2.15.7z
    http://bayfiles.com/file/8ObB/0E973F/US_epad-user-9.4.2.15.7z
    http://www.gamefront.com/files/21633428/US_epad-user-9.4.2.15.7z
    http://uptobox.com/yhpuee11yyav/US_epad-user-9.4.2.15.7z.html
    http://fileflyer.com/view/aa62cBW

    Mirrors of WW .15:
    http://drivers.softpedia.com/get/JO...ansformer-Prime-TF201-Firmware-94215-WW.shtml (this is not mine again)
    http://d-h.st/Lcw
    https://docs.google.com/open?id=0B8gHyfs-S25LQklqeVUzV2VJT0k
    View

New posts