[ROOT] Successful root access on Zeblaze Blitz watch…
I was needed a root access on the watch to get a glimpse, access and dump of partitions inside the watch… Now can do all that with ADB ^^
Next steps to unlock watch Faces will be easier… Stay tuned… 
EDIT : Working on BOOT and system images to disable security check that prevent modification of the system partition. Reboot after 1st ROOT will put the watch in security mode that make it unusable… Will share after this will be ok…
@George_Zervas will publish HOWTO when my work will be complete ^^ You need SP_Flash_Tool, twrp and latest beta supersu zip to flash… Not the easy way, so don’t go this way if you don’t know what I am talking about ^^ 
Good news. Thank you…
Using the TWRP that @Ciro_Danise made for you guys is the easiest and safest way to do this by far. All you do is flash the recovery only with SP Tools and then transfer SuperSu zip to watch and flash in recovery. Done.
This is all in the guides section - I’m really surprised you guys don’t know about this - that’s why we go to so much trouble to make these things for you …
@Pablo_Eleven_Pablo11 No, the job is not currently done cause when you reboot your watch, the launcher will check if the private filesystem has not been modified then put the watch in error mode… All you will get is the Zeblaze logo to look at ! 
I need to work on this behavior before posting a full solution.
I see. The file is the recovery-from-boot.p file in the system partition. This needs to be removed or edited.
It also means you must not take the OTA if it comes available after you do this
@Pablo_Eleven_Pablo11 Yes, aware of this file. I have also made a modified boot.img and ramdisk to remove security and put SELinux in permissive mode. Kernel is compiled to allow that, it’s a chance.
Once this is complete there will have to be stock firmware available for all these watches as some may want to get back to taking OTA updates…
@Olimatou also want to ask you something. @Ciro_Danise made a TWRP recovery for the KW88. The only issue is that the display comes up inverted by 180°. No matter what we do. Both he and I have recompiled it several times, edited the .prop file to remove the 180° setting. Made no difference.
Any ideas?
This is the only watch we don’t have a recovery for…
@Pablo_Eleven_Pablo11 Can you send me a dump from the watch ? Only boot.img will be ok… You can dump it from SP_Flash ( http://www.droidgyan.com/readback-backup )… Try to get a scatter file for the watch, then backup boot partition from starting address and length… Near 10Mo normally…
@Pablo_Eleven_Pablo11 About stock firmware, you can dump partitions from SP_Flash tool from a new watch to have a full backup… For OTA updates, only original recovery is needed, so you flash it before upgrading, then you get back to twrp after that ^^ Not a big issue ^^
@Olimatou Yes I know about the SP dumps - we have done many of these watches It is the KW88 is the only problem …
I will be able to give you a copy of the stock boot and recovery and also the compiled TWRP. It is odd - the interface is flipped but the layout underneath is ok …In default .prop we have changed the ro.hwrotation but still no difference…
Where should I send the images ?
@Olimatou it is an issue when it runs the security check over the system image and discovers you have modified it. Every OTA does this for these watches. The only way to take the OTA is to SP flash back to complete stock.
Hi Hodin,
I’ve been try reflash with http://system.img from KW88, but the view is upside down LOL, on computer will detect KW88.
Hi, Hodin,
Thanks your root work on Z9-KY-V04.
i still use this version because hand brigth screen is good to viewed watchface, Z9-KY-V06 when hand brigth screen on will view other watchface.
Thanks
Thanks, but the http://www.droidgyan.com/readback-backup link shows empty (no contents). How to download the “Readback Backup Tool”?