Here's my simple how to with prepared image.
These step already done, no need to do this on linux box:
* Give executable permissions for mksh (sh is linked to mksh):
* Set imutable bit for mksh:
* While doing this, you may just as well download motochopper and put pwn to xbin and give execute permissions:
Write image on sdcard min 2Gb.
Put the card in tab and boot it.
When you see " Cold-boot Linux..." connect usb cable to pc and start a shell, presume windows command prompt, adb drivers installed too...
on
C:\>
type:
on
[email protected]:/ $
type:
will see:
[+] This may take a few minutes.
[+] Success!
sh: /system/xbin/busybox: not found
sh: cp: not found
type:
Code:
export PATH=$PATH:/system/xbin/busyboxbin
then type:
STOP here if your OTA is diferent, i mean - no 3g - wifi only, and country code is not listed below!
Read OTA WARNING bellow!!!
If your device is 3g and OTA is like mine, then proceed with next step.
OTA for specific device see on
stifilz post here:
http://forum.xda-developers.com/showpost.php?p=26882762&postcount=3
on:
[email protected]:/ # type the following lines one by one followed by enter key
Code:
/system/xbin/busyboxbin/dd if=/system/jb411r2/system.img of=/dev/block/mmcblk0p3 [COLOR="Red"][U]press ENTER, and wait, to see when it's done[/U][/COLOR]
/system/xbin/busyboxbin/dd if=/system/jb411r2/system.img of=/dev/block/mmcblk0p4 [COLOR="Red"][U]press ENTER, and wait... when done, proceed[/U][/COLOR]
/system/xbin/busyboxbin/dd if=/system/jb411r2/hidden.img of=/dev/block/mmcblk0p7 [COLOR="Red"][U]press ENTER, and wait[/U][/COLOR]
You can copy lines from here and paste it on command prompt window... When dd is done you can type
reboot, or simply close command window, remove the card and start the tab. After SONY logo will see a triangle with an exclamation mark, tab will reboot and another one triangle with an exclamation mark, after that will boot to the os...
Job DONE.
OTA WARNING and how to desklinvr your specific device firmware!
Sorry for the delay, thanks again to jappaj, please follow these simple steps to desklunvr your firm, and don't do cross flash 3g<->wifi<->3g versions.
Here's the link to image
jb411r2sdcard.img with motochopper, system.img and hidden.img from
signed-txs03_350-ota-130705005_desklunvr.zip - image for 3g model - county codes: AT BE BG CH CZ DK FI GR HU IE KZ NL NO PL PT RO RU SE SI SK TR UA,
for other images, you need to desklunvr your preferable and put system and hidden via adb put...
Guys, I would strongly advice against flashing "wrong" firmware to your device, especially 3G vs non-3G! We still have no idea if we can flash older /different bootleader/kernel to the device (I bet that with dd answer is no) and if there is something different between kernels, you may encounter some ill-effects even if everything seems to work (ie. batttery drain or anything else). Also, using dd we can flash only system and hidden partitions, there are plenty of other partitions like config - who knows what happens if you have config from non-3G device and system from 3G?
So just download right OTA for your specific device, decrypt, push to SD-card and flash that!
- Using desklunvr (
http://forum.xda-developers.com/showthread.php?t=2068261) decrypt the OTA you used to brick your devices in the first place. ie:
Code:
desklunvr.exe signed-txs03_xxx-ota-nnn.zip
- Unzip decrypted zip
- Push resulting system.img to /tmp (or better write it to sd-card while you write pwn etc., adb is slow...):
- From adb shell flash system image to first system partition:
Code:
/system/xbin/busyboxbin/dd if=/tmp/system.img of=/dev/block/mmcblk0p3
- From adb shell flash system image to second system partition:
Code:
/system/xbin/busyboxbin/dd if=/tmp/system.img of=/dev/block/mmcblk0p4
Code:
/system/xbin/busyboxbin/dd if=/tmp/hidden.img of=/dev/block/mmcblk0p7
Million thanks to
@deltaztek for obtaining SD-card in the first place,
@djrbliss for motochopper,
@<robin> for desklunvr,
@condi for gathering knowledge about how to flash images to the device ,
@stifilz for firmwares and of course SonyCenterGuy why leaked the SD-card (could be on purpose, you know...)! If I forgot to thank somebody, sorry and tell me and I will add credits!
Good luck!
