Run Windows 11 (ARM64) on the Samsung Galaxy S9+ SM-G965F (Exynos 9810, "star2lte"). This repository holds the firmware, drivers and a graphical installer that takes a phone from a fully stock Android state to installed Windows.

One validated device. Everything here has only been proven on SM-G965F with Windows 11 22H2/23H2 ARM64 (the builds listed in the firmware catalog: 22621/22631.2428 and 22621.7582/22631.7584). The installer knows which steps are automated and which are not: unfinished stages are shown as coming soon and the installer stops before them rather than guessing. Do not point it at another model or firmware.

The whole installation, from a stock Galaxy S9+ to the Windows desktop.

The releases carry everything else you need, all listed in SHA256SUMS:

Windows itself is never redistributed: bring your own ARM64 media.

The installer is a Windows desktop app. It walks the end-to-end flow and, for each stage, either performs the work or guides you through the manual part and verifies the result.

The flow is end to end: from plugging the phone in to landing on the Windows desktop. All the slow PC-side work (choosing media and building the image) runs before the phone is touched, so the on-device steps — unlock, TWRP, backup, and the verified writes — run back to back. The Build the Windows image step produces a bootable Windows volume (with your drivers, the optional slim profile and an OOBE answer file that creates your local account, skips the setup screens and sets the display scaling to 275 DPI for the phone's screen); Copy Windows writes it plus the boot files to the phone. After First boot, Windows setup completes on its own and signs you in.

Every stage has been run end to end on the reference phone, from stock Android to the Windows desktop. The installer still backs up the phone before it writes anything that cannot be recovered, and keeps those backups on your PC: keep them.

Quality-of-life tools (e.g. "Restart to TWRP" from inside Windows) live on the Tools page.

The first time it runs, the installer opens Set up. The install pages stay locked until everything below is ready, and the choices are remembered in %LOCALAPPDATA%\S9WoaInstaller\toolset.json (or in the data folder next to the app, when there is one: portable mode).

Set up automatically installs everything that needs no decision from you. Release downloads are kept only if they match the release's SHA256SUMS (and, for the UEFI images, the SHA-256 recorded in firmware.json as well); a release without that file is refused. Any program can be replaced with your own copy (Use a different file…), and a local build folder takes precedence over releases.

The raw Windows image and boot files are produced automatically by the Build the Windows image step (under the installer's work folder); you don't supply them.

tools\release\make-release-extras.ps1 builds the installer zips (self-contained publish plus the bundled runtimes' license terms) and the prebuilt recovery (the official TWRP re-skinned with the open fonts in tools/twrp-winre/fonts and the built-in gears). tools\release\make-payload.ps1 then assembles every asset: firmware.json with its UEFI images (each checked against the hash the catalog records), drivers.zip, those extras, and SHA256SUMS:

.\tools\release\make-release-extras.ps1 -Twrp <official twrp-3.7.0_9-0-star2lte.img> -Version 0.1.0 -OutDir out\extras
.\tools\release\make-payload.ps1 -FirmwareCatalog <folder with firmware.json> `
    -Drivers <Exynos9810Ufs package>, <Exynos9810Hsi2c package>, <S6SY761Touch package> `
    -Assets (Get-ChildItem out\extras).FullName -OutDir out\release
gh release create v0.1.0 (Get-ChildItem out\release).FullName

Never attach Windows media or a built Windows image, and never a recovery the installer built on a PC: that one carries Segoe UI from the builder's Windows (and maybe Microsoft's UpdateOS animation). make-payload.ps1 refuses a recovery whose build stamp is not "open fonts, built-in gears".

Requirements: Windows 11, the .NET 8 SDK, and the Windows App SDK workload (Visual Studio 2022 "WinUI" workload or the standalone components).

cd installer
dotnet build S9Woa.Installer.sln -c Release -p:Platform=x64
dotnet test tests\S9Woa.Installer.Core.Tests\S9Woa.Installer.Core.Tests.csproj -p:Platform=x64

-p:Platform=ARM64 builds the ARM64 flavour. The app is unpackaged (WindowsPackageType=None) but keeps the MSIX tooling on, which is what puts its compiled XAML resources (S9WoaInstaller.pri) into a dotnet publish.

Requires EDK2 BaseTools, the CLANGPDB toolchain (LLVM), Python and GnuWin32 make. See firmware/tools/build-uefi.ps1 and firmware/tools/pack-uefi.ps1. The UEFI images in the releases are the builds validated on the phone, one per Windows build (see firmware.json); they come from the research lineage of this tree, and reproducing them byte for byte from firmware/ is not scripted yet.

• UFS storage: drivers/Exynos9810Ufs/build-ufs.ps1 (fixed cl/link command lines, reproducible). The released driver is build-ufs.ps1 -SourceDir drivers\Exynos9810Ufs -OutDir <new folder> -WideUncached -DmaWindow, which reproduces it byte for byte (unsigned SHA-256 a80b222939e7ec81522221740de5346b9799ff68492a875d996fdf947138eaa7).
• HSI2C: msbuild drivers\Exynos9810Hsi2c\Exynos9810Hsi2c.vcxproj /p:Configuration=Release /p:Platform=ARM64 (needs the WDK's Visual Studio integration); see its README.
• Touch: drivers/S6SY761Touch/README.md.

All three are test-signed, so Windows runs them with test signing on, which the installer enables in the image it builds.

Installing Windows erases Android and touches low-level partitions. The installer backs up EFS, modem calibration and the partition table before any destructive step. Keep those backups: they are how you return to stock. There is no warranty — see the license.

If this project has helped you, please consider showing your support! A small donation helps me dedicate more time to projects like this.

Patreon | PayPal | Ko-fi

This project reuses code and follows designs from other projects, and would not exist without them:

• Project Silicium / Mu-Silicium (Robotix22, N1kroks, halal-beef and contributors): the CNTFRQ_EL0 shellcode Windows needs to boot on this SoC, and the winload patch targets around it (MIT); the DXE RAM-manager approach; and its Exynos 9810 Windows-boot work as the reference for this firmware.
• Renegade Project / edk2-msm and edk2-exynos: the boot shim every UEFI image starts with (BSD-2-Clause), and the firmware's load layout.
• WOA-Project (Ben (Bingxing) Wang / imbushuo, Gustave Monce / gus33000, the DuoWoA authors): Lumia950XLPkg and mu_andromeda_platforms, whose structure the firmware's DSC/FDF follow, and the kernel-patching approach that started with Samuel Tulach's rainbow.
• TheMorc (Richard Gráčik): the S6SY761 touchscreen driver ours is derived from, itself built on Microsoft's vhidmini2 sample and Gustave Monce's nt36xxx_win, porting Andi Shyti's Linux driver.
• Microsoft's Windows-driver-samples (SkeletonI2C, vhidmini2), TianoCore EDK2, the mainline Linux and postmarketOS Exynos 9810 communities, TWRP, and more.

NOTICE has the full list, what came from where, and the license texts.

Firmware, drivers (except the touch driver), the installer and the release tools are under the BSD-2-Clause-Patent license (see LICENSE). The touchscreen driver under drivers/S6SY761Touch/ is GPL-2.0-only; its own LICENSE file governs that subtree. The HSI2C driver under drivers/Exynos9810Hsi2c/ is BSD-2-Clause-Patent AND MS-PL (its framework scaffolding comes from Microsoft's SkeletonI2C sample; see its README and MS-PL.txt).