[SCRIPTS] CWR Hacking- ReRecovery after a DataWipe or Flash - Motorola Droid X2

mastafunk said:
Well lets start from the beginning. Does this phone even have a​ charge_only_mode? If pluged in when off does it fire off a battery meter?
If so is there a file called /system/bin/charge_only_mode. If so is this file a softlink to a file called /system/bin/hijack?
Is /system/bin/hijack actually there?
Those are pretty much the prerequisites for setup....
Then what triggers the whole deal is a file in /data called .recovery_mode
check for that file. Look inside.. is it a "1", if so everything is in place and it should do it.
Click to expand...
Click to collapse
Thanks to mastafunk for the info.
I noticed after uninstalling system recovery that it still worked(edit pull is for emergency only will reset date. Just plug in and power off) w/ a battery pull. I remember now where the /preinstall files came from:
Rom Manager
Set charge mode.
Uninstall sys recov, and rom mgr(if there).
Then DL mkt RM free/donate. Install.
DL latest 5025 (1st choice).
Reboot into recov and it just boots.
Install Tenfar's and get into cwr.
Go adv and reboot recovery (goes to stk recov, should this not be CWR? So here is where the preinstall gets filled?) and reboot from there.
/preinstall is filled!
You do not need to do this just showing how they got there.
I am saying that with these 2 folders: /preinstall and /system/bin as well as the .recovery_mode file , cwr works for the Dx2. While trying to confirm the source of the PI files I crashed. So SBF'ing I confirmed it works: use Root Explorer, you may have to set charge mode and uninstall SR.
1)paste to /preinstall: the 3 files and set perms to rwxrwxrwx ( adbd is not needed btw. ), and update-recovery.zip: rwxr-xr-x . Note hijack goes to /preinstall as well as /system/bin.
2)Change charge_only_mode ( your original in system/bin) to .bak. Then paste the 2 /system/bin files (less the .not file) set perms to rwxrwxrwx.
3)Then .recovery_mode goes in /data perms to rw-rw-rw-.
Edit: have the charger plugged in and Power off. I thought a: (Pull battery and put it back in. Plug in) was needed but it is not. CWR!
Edit: the /pi needs just 3 files: ud-recovery.zip, ud-binary(same as in the zip) and hijack (same as system/bin/) 6 files if you count hijack twice.
This may work on the Milestone X2. I don't know of anyone who tried this yet.
About the files needed (attached at the end)note file: charge_only_mode.bin.not in /system/bin was included for reference NOT TO MESS WITH IT.
The linkage notation, in Root Explorer, from chargeonlymode to hijack gets lost once the files are off the phone but it still works.
This could it be packaged in a zip and flashed from CWR so after a data wipe or a ROM flash CWR could be restored before leaving CWR.
I wrote a test script to write .recovery_mode to /data. I wiped data from cwr then mounted /data manually. Then ran the script and recovery was restored with a battery pull.
I cannot get the full "ReRecovery" to work. For the update-binary I am told P3Droid's prerooted 234 is good to pull from. But have yet to try his binary. Here is where I am at: updater-script:
run_program("/bin/mount", "/dev/block/ mmcblk0p12 ", "/system");
run_program("/bin/mount", "/dev/block/ mmcblk0p16 ", "/data");
run_program("/bin/mount", "/dev/block/ mmcblk0p17 ", "/preinstall");
#this one zeroed /preinstall.
Or
#mount("ext3", "/dev/block/mmcblk0p12", "/system");
#mount("ext3", "/dev/block/mmcblk0p17", "/preinstall");
#mount("ext3", "/dev/block/mmcblk0p16", "/data");
# this gave a status 7
package_extract_dir("data", "/data");
#set_perm(0, 0, 0666, "/data/.recovery_mode");
set_perm(0, 0, 0666, "/data/test");
unmount("/data");
package_extract_dir("system", "/system");
#set_perm(0, 0, 0777, "/system/bin/charge_only_mode");
set_perm(0, 0, 0777, "/system/bin/test");
#set_perm(0, 0, 0777, "/system/bin/hijack");
unmount("/system");
package_extract_dir("preinstall", "/preinstall");
#set_perm(0, 0, 0666, "/preinstall/adbd");
set_perm(0, 0, 0666, "/preinstall/test");
#set_perm(0, 0, 0777, "/preinstall/hijack");
#set_perm(0, 0, 0777, "/preinstall/hijack.killall");
#set_perm(0, 0, 0777, "/preinstall/update-binary");
#set_perm(0, 0, 0755, "/preinstall/update-recovery.zip");
unmount("/preinstall");
End code
#'ed out real files for test files. This trashed /preinstall and no test files got written. Test files are 0 bytes.
Any help would be greatly appreciated.

---

I got bored and decided to try this out. Did you paste to /preinstall with root explorer because I can't get it to mount r/w. The button to switch modes isn't there in the preinstall file. It is on the root and every other file on the root.
Sent from my DROID X2 using XDA App

---

I think you are in a kind of unrooted funk. Happened to me b4. RE has a fit. Reroot. Or reinstall RE.

---

I am certain it was Rom Mgr and a version used at the same time as http://www.droidforums.net/forum/dr...ve-successful-system-upgrade.html#post1791296

---

Found it!!!!!!!!!!
Set charge mode.
Uninstall sys recov, and rom mgr(if there).
Then DL mkt free RM. Install. Choose "all CWM ..." last menu.
DL 5024.
Reboot into recov and it just boots.
Install Tenfar's and get into cwr.
Go adv and reboot recovery (stk recov) and reboot from there.
/preinstall is filled!

---

rename these files and cwr will not boot!
Put names back.
From rom mgr "backup current rom"
Pulled(a4 green led) battery and put back(b4 logo) while chg. plug still in.
Got cwr -could not mount sd......
Got this after boot: log
Starting recovery on Sun Dec 25 14:25:38 2011
Starting Open fb0 devices
DroidX2 Recovery GFAN.COM V2.5.1.8
Command: "/sbin/recovery"
ro.secure=1
ro.allow.mock.location=0
ro.debuggable=0
persist.service.adb.enable=1
EXTERNAL_STORAGE_MOUNT=/mnt/sdcard
ro.factorytest=0
ro.usb_mode=normal
ro.serialno=TA05404FJV
ro.bootmode=unknown
ro.baseband=unknown
ro.carrier=unknown
ro.bootloader=unknown
ro.hardware=daytona
ro.revision=33696
ro.build.id=4.5.1A-DTN-150-30
ro.build.display.id=4.5.1A-DTN-150-30
ro.build.version.incremental=0
ro.build.version.sdk=10
ro.build.version.codename=REL
ro.build.version.release=2.3.4
ro.build.date=Tue Aug 23 21:45:08 CDT 2011
ro.build.date.utc=1314153908
ro.build.type=user
ro.build.user=hudsoncm
ro.build.host=il93lnxdroid52
ro.build.tags=release-keys
ro.product.model=DROID X2
ro.product.brand=verizon
ro.product.name=daytona
ro.product.device=daytona
ro.product.board=daytona
ro.product.cpu.abi=armeabi-v7a
ro.product.cpu.abi2=armeabi
ro.product.manufacturer=motorola
ro.product.locale.language=en
ro.product.locale.region=US
ro.wifi.channels=
ro.board.platform=tegra
ro.build.product=daytona
ro.build.description=daytona-user 2.3.4 4.5.1A-DTN-150-30 0 release-keys
ro.build.fingerprint=verizon/daytona/daytona:2.3.4/4.5.1A-DTN-150-30/0:user/release-keys
persist.ril.uart.flowctrl=1
persist.ril.mux.ttydevice=/dev/ttyHS3
persist.ril.mux.noofchannels=8
persist.ril.modem.ttydevice=/dev/ttySPI0
persist.ril.modem.mode=1
persist.ril.features=0x0C
mot.mdm_panicd.nopanic=yes
ro.hdmi.mirror.enable=false
ro.hdmi.default.app=
hw.overlay.path.config=
ro.mot.ril.danlist=611,*611,#611
persist.ril.ecclist=911,*911,#911
windowsmgr.max_events_per_sec=70
ro.sf.lcd_density=240
dalvik.vm.heapsize=32m
ro.mot.hw.calibratedImager=1
ro.default_usb_mode=2
ro.tether.denied=false
ro.cdma.homesystem=64,65,76,77,78,79,80,81,82,83
ro.telephony.default_network=4
ro.com.google.clientid=android-motorola
ro.url.legal=http://www.google.com/intl/%s/mobile/android/basic/phone-legal.html
ro.url.legal.android_privacy=http://www.google.com/intl/%s/mobile/android/basic/privacy.html
ro.config.vc_call_vol_steps=7
keyguard.no_require_sim=true
ro.cdma.home.operator.numeric=310004
ro.cdma.home.operator.alpha=Verizon
ro.cdma.otaspnumschema=SELC,1,80,99
persist.radio.cdma.min=8186321808
ro.HorizontalVVM=true
ro.opengles.version=131072
ro.url.safetylegal=http://www.motorola.com/staticfiles/Support/legal
ro.mot.hw.HAC=1
ro.mot.eri=1
persist.mot.proximity.touch=1
ro.cdma.nbpcd=1
mot.proximity.delay=450
mot.proximity.distance=60
wifi.supplicant_scan_interval=45
persist.radio.vzw.cdma.mdn=8186321808
ro.mot.mynet=true
cdma.nbpcd.supported=false
ro.mot.bindervm.config=165
ro.ngp_available=1
ro.modem_available=0
persist.mot.usb.mediasync=1
ro.cdma.sms.latin_encode=true
ro.mot.deep.sleep.supported=true
ro.mot.hw.uaprof=http://uaprof.vtext.com/mot/mb870/mb870.xml
ro.blan.interface=usb0
mot.mms.conn.timeout=30000
mot.mms.socket.timeout=120000
mot.mms.tr.vc.timeout=55000
mot.mms.trm.timeout=240000
mot.mms.abort.prog.lim=90
mot.mms.retry.pic.size=512000
mot.mms.retry.default=false
mot.mms.retry.timeout.1=30000
mot.mms.retry.timeout.2=180000
mot.mms.retry.timeout.3=300000
mot.mms.retry.timeout.4=480000
ro.com.google.clientidbase=android-motorola
ro.com.google.clientidbase.ms=android-verizon
ro.com.google.clientidbase.am=android-verizon
ro.com.google.clientidbase.gmm=android-motorola
ro.com.google.clientidbase.yt=android-verizon
rild.libpath=/system/lib/libmoto_ril.so
persist.ril.mux.retries=500
persist.ril.mux.sleep=2
ro.kernel.android.ril=yes
ro.config.ringtone=DroidX2.ogg
ro.config.notification_sound=Droid.ogg
ro.config.alarm_alert=Alarm_Classic.ogg
ro.media.enc.aud.fileformat=qcp
ro.media.enc.aud.codec=qcelp
ro.media.enc.aud.bps=13300
ro.media.enc.aud.ch=1
ro.media.enc.aud.hz=8000
ro.com.google.gmsversion=2.3_r5
ro.config.sync=no
ro.browser.useragent=0
ro.media.camcorder.720p=mp4,h264,30,12000000,aac,128000,44100,2
ro.media.camcorder.d1NTSC=mp4,h264,30,6000000,aac,128000,44100,2
ro.media.camcorder.vga=mp4,h264,30,4000000,aac,128000,44100,2
ro.media.camcorder.cif=mp4,h264,30,1500000,aac,128000,44100,2
ro.media.camcorder.qvga=mp4,h264,15,500000,aac,32000,16000,2
ro.media.camcorder.mms=3gp,h264,15,128000,amrnb,12200,8000,1
ro.media.camcorder.mmsres=qvga
ro.camcorder.zoom=true
ro.media.capture.shuttertone=1
ro.camcorder.videoModes=false
ro.telephony.call_ring.multiple=false
ro.telephony.call_ring.delay=3000
ro.cdma.data_retry_config=default_randomization=2000,0,0,120000,180000,540000,960000
ro.mot.setuptype=2
ro.media.camera.focal=3378.6,3378.6
ro.media.camera.principal=1632.0,1224.0
ro.media.camera.skew=0.0
ro.media.camera.distortion=0.0,0.0,0.0,0.0,0.0
ro.media.camera.calresolution=3264,2448
ro.mot.internalsdcard=1
dalvik.vm.dexopt-flags=m=y
net.bt.name=Android
net.change=net.tcp.buffersize.gprs
dalvik.vm.stack-trace-file=/data/anr/traces.txt
ro.mot.dpmext=true
ro.build.version.full=Blur_Version.1.3.380.MB870.Verizon.en.US
ro.mot.hidden_keyboards=evfwd
ro.sys.atvc_allow_netmon_usb=0
ro.sys.atvc_allow_netmon_ih=0
ro.sys.atvc_allow_res_core=0
ro.sys.atvc_allow_res_panic=0
ro.sys.atvc_allow_all_adb=0
ro.sys.atvc_allow_all_core=0
ro.sys.atvc_allow_efem=0
ro.sys.atvc_allow_bp_log=0
ro.sys.atvc_allow_ap_mot_log=0
ro.sys.atvc_allow_gki_log=0
persist.sys.timezone=America/Los_Angeles
persist.sys.mot.encrypt.mmc=0
persist.sys.localevar=
persist.sys.language=en
persist.service.adb.NV_DISABLE=1
persist.sys.country=US
ro.FOREGROUND_APP_MEM=2464
ro.VISIBLE_APP_MEM=3712
ro.PERCEPTIBLE_APP_MEM=5632
ro.HEAVY_WEIGHT_APP_MEM=5632
ro.SECONDARY_SERVER_MEM=7392
ro.BACKUP_APP_MEM=7392
ro.HOME_APP_MEM=7392
ro.HIDDEN_APP_MEM=14336
ro.EMPTY_APP_MEM=16896
ro.FOREGROUND_APP_ADJ=0
ro.VISIBLE_APP_ADJ=1
ro.PERCEPTIBLE_APP_ADJ=2
ro.HEAVY_WEIGHT_APP_ADJ=3
ro.SECONDARY_SERVER_ADJ=4
ro.BACKUP_APP_ADJ=5
ro.HOME_APP_ADJ=6
ro.HIDDEN_APP_MIN_ADJ=7
ro.EMPTY_APP_ADJ=15
net.tcp.buffersize.default=65536,131072,262144,65536,131072,262144
net.tcp.buffersize.wifi=4095,87380,110208,4096,16384,110208
net.tcp.buffersize.umts=4094,87380,110208,4096,16384,110208
net.tcp.buffersize.edge=4093,26280,35040,4096,16384,35040
net.tcp.buffersize.gprs=4092,8760,11680,4096,8760,11680
wifi.interface=eth0
softap.interface=wl0.1
sys.mot.encrypt.keysig=a32d22b8d3175b4a
sys.chargeonly.mode=1
init.svc.servicemanager=running
init.svc.vold=running
init.svc.netd=running
init.svc.debuggerd=running
init.svc.ril-daemon=running
init.svc.12m_files_copy=stopped
init.svc.nvrm_daemon=running
init.svc.battd=running
init.svc.usbd=running
init.svc.touch=stopped
init.svc.atvc=stopped
init.svc.adbd=running
init.svc.zygote=stopped
ril.restart.counter=1
ro.ril.barcode=
ro.ril.ecclist=911,#911,*911,112
I:Checking for extendedcommand...
I:Running extendedcommand...
Waiting for SD Card to mount (20s)
SD Card mounted...
I:Running script:
I:
ui_print("ROM Manager Version 4.8.0.7");
ui_print("December 25, 2011");
assert(backup_rom("/emmc/clockworkmod/backup/2011-12-25-14.24.18"));
line 1: unexpected character at 'u'
Syntax error in update script