[Hardware Hacking General] fergy:
LG D955 (Flex International)

-on Southern Europe firmware 20a KitKat 4.4.2

partitions

0 30535680 mmcblk0
1 65536 mmcblk0p1
2 1024 mmcblk0p2
3 512 mmcblk0p3
4 512 mmcblk0p4
5 1024 mmcblk0p5
6 1024 mmcblk0p6
7 16384 mmcblk0p7
8 1024 mmcblk0p8
9 1 mmcblk0p9
10 3072 mmcblk0p10
11 3072 mmcblk0p11
12 1 mmcblk0p12
13 16384 mmcblk0p13
14 32768 mmcblk0p14
15 16384 mmcblk0p15
16 3072 mmcblk0p16
17 512 mmcblk0p17
18 512 mmcblk0p18
19 1 mmcblk0p19
20 512 mmcblk0p20
21 8192 mmcblk0p21
22 8192 mmcblk0p22
23 16384 mmcblk0p23
24 32768 mmcblk0p24
25 32768 mmcblk0p25
26 32768 mmcblk0p26
27 32768 mmcblk0p27
28 8192 mmcblk0p28
29 2048 mmcblk0p29
30 512 mmcblk0p30
31 1024 mmcblk0p31
0 1024 mmcblk0p32
1 8 mmcblk0p33
2 3407872 mmcblk0p34
3 819200 mmcblk0p35
4 81920 mmcblk0p36
5 16384 mmcblk0p37
6 49152 mmcblk0p38
7 25690112 mmcblk0p39
8 12271 mmcblk0p40
32 512 mmcblk0rpmb

mounts

rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,seclabel,nosuid,relatime,size=933392k,nr_inodes=87561,mode=755 0 0
devpts /dev/pts devpts rw,seclabel,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,seclabel,relatime 0 0
selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
none /sys/fs/cgroup tmpfs rw,seclabel,relatime,size=933392k,nr_inodes=87561,mode=750,gid=1000 0 0
tmpfs /mnt/asec tmpfs rw,seclabel,relatime,size=933392k,nr_inodes=87561,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,seclabel,relatime,size=933392k,nr_inodes=87561,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/platform/msm_sdcc.1/by-name/system /system ext4 ro,seclabel,noatime,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/userdata /data ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,resuid=1000,errors=continue,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/sns /sns ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/drm /persist-lg ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/mpt /mpt ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/cache /cache ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/persist /persist ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/modem /firmware vfat ro,relatime,uid=1000,gid=1000,fmask=0337,dmask=0227,codepage=cp437,iocharset=iso8859-1,shortname=lower,errors=remount-ro 0 0
/dev/block/platform/msm_sdcc.1/by-name/cust /cust ext4 ro,seclabel,nosuid,nodev,relatime,noauto_da_alloc,data=ordered 0 0
/dev/fuse /mnt/shell/emulated fuse rw,nosuid,nodev,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/fuse /storage/emulated/legacy fuse rw,nosuid,nodev,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0

block/platform/msm_sdcc.1/by-name/

modem -> /dev/block/mmcblk0p1
sbl1 -> /dev/block/mmcblk0p2
dbi -> /dev/block/mmcblk0p3
DDR -> /dev/block/mmcblk0p4
aboot -> /dev/block/mmcblk0p5
rpm -> /dev/block/mmcblk0p6
boot -> /dev/block/mmcblk0p7
tz -> /dev/block/mmcblk0p8
pad -> /dev/block/mmcblk0p9
modemst1 -> /dev/block/mmcblk0p10
modemst2 -> /dev/block/mmcblk0p11
pad1 -> /dev/block/mmcblk0p12
misc -> /dev/block/mmcblk0p13
persist -> /dev/block/mmcblk0p14
recovery -> /dev/block/mmcblk0p15
fsg -> /dev/block/mmcblk0p16
fsc -> /dev/block/mmcblk0p17
ssd -> /dev/block/mmcblk0p18
pad2 -> /dev/block/mmcblk0p19
encrypt -> /dev/block/mmcblk0p20
drm -> /dev/block/mmcblk0p21
sns -> /dev/block/mmcblk0p22
ve -> /dev/block/mmcblk0p23
laf -> /dev/block/mmcblk0p24
fota -> /dev/block/mmcblk0p25
mpt -> /dev/block/mmcblk0p26
carrier -> /dev/block/mmcblk0p27
eri -> /dev/block/mmcblk0p28
blus -> /dev/block/mmcblk0p29
dbibak -> /dev/block/mmcblk0p30
rpmbak -> /dev/block/mmcblk0p31
tzbak -> /dev/block/mmcblk0p32
rct -> /dev/block/mmcblk0p33
system -> /dev/block/mmcblk0p34
cache -> /dev/block/mmcblk0p35
tombstones -> /dev/block/mmcblk0p36
spare -> /dev/block/mmcblk0p37
cust -> /dev/block/mmcblk0p38
userdata -> /dev/block/mmcblk0p39
grow -> /dev/block/mmcblk0p40

df

Filesystem Size Used Free Blksize
/dev 911.52M 132.00K 911.39M 4096
/sys/fs/cgroup 911.52M 12.00K 911.50M 4096
/mnt/asec 911.52M 0.00K 911.52M 4096
/mnt/obb 911.52M 0.00K 911.52M 4096
/system 3.19G 1.65G 1.55G 4096
/data 24.07G 6.01G 18.06G 4096
/sns 7.83M 4.04M 3.80M 4096
/persist-lg 7.83M 4.37M 3.46M 4096
/mpt 31.46M 13.36M 18.09M 4096
/cache 786.53M 12.63M 773.90M 4096
/persist 31.46M 4.04M 27.42M 4096
/firmware 63.95M 52.47M 11.48M 16384
/cust 46.22M 10.35M 35.87M 4096
/mnt/shell/emulated 24.07G 6.01G 18.06G 4096
/storage/emulated/legacy 24.07G 6.01G 18.06G 4096

build.prop

# begin build properties
# autogenerated by buildinfo.sh
ro.build.id=KOT49I.D95520a
ro.build.display.id=KOT49I.D95520a
ro.build.version.incremental=D95520a.1398697601
ro.build.version.sdk=19
ro.build.version.codename=REL
ro.build.version.release=4.4.2
ro.build.date=Tue Apr 29 00:11:35 KST 2014
ro.build.date.utc=1398697895
ro.build.type=user
ro.build.user=gaius.park
ro.build.host=LGEARND12B2
ro.build.tags=release-keys
ro.product.model=LG-D955
ro.product.brand=lge
ro.product.name=z_open_com
ro.product.device=zee
ro.product.board=MSM8974
ro.product.cpu.abi=armeabi-v7a
ro.product.cpu.abi2=armeabi
ro.product.manufacturer=LGE
ro.product.locale.language=en
ro.product.locale.region=US
ro.wifi.channels=
ro.board.platform=msm8974
# ro.build.product is obsolete; use ro.product.device
ro.build.product=zee
# Do not try to parse ro.build.description or .fingerprint
ro.build.description=z_open_com-user 4.4.2 KOT49I.D95520a D95520a.1398697601 release-keys
ro.build.fingerprint=lge/z_open_com/zee:4.4.2/KOT49I.D95520a/D95520a.1398697601:user/release-keys
ro.build.characteristics=nosdcard
# end build properties
#
# from device/lge/zee/system.prop
#
#
# system.prop for msm8974
#

rild.libpath=/vendor/lib/libril-qc-qmi-1.so
rild.libargs=-d /dev/smd0
persist.rild.nitz_plmn=
persist.rild.nitz_long_ons_0=
persist.rild.nitz_long_ons_1=
persist.rild.nitz_long_ons_2=
persist.rild.nitz_long_ons_3=
persist.rild.nitz_short_ons_0=
persist.rild.nitz_short_ons_1=
persist.rild.nitz_short_ons_2=
persist.rild.nitz_short_ons_3=
ril.subscription.types=NV,RUIM
DEVICE_PROVISIONED=1
# Start in GWL mode (NETWORK_MODE_LTE_GSM_WCDMA)
#ro.telephony.default_network=9

debug.sf.hw=1
debug.egl.hw=1
debug.composition.type=c2d
persist.hwc.mdpcomp.enable=true
debug.mdpcomp.logs=0
dalvik.vm.heapsize=36m
dev.pm.dyn_samplingrate=1
persist.demo.hdmirotationlock=false

ro.hdmi.enable=true
tunnel.decode=false
tunnel.audiovideo.decode=false
lpa.decode=true
lpa.use-stagefright=true
persist.speaker.prot.enable=false

#
# system props for the cne module
#
persist.cne.feature=1

#system props for the MM modules

media.stagefright.enable-player=true
media.stagefright.enable-http=true
media.stagefright.enable-aac=true
media.stagefright.enable-qcp=true
media.stagefright.enable-fma2dp=true
media.stagefright.enable-scan=true
mmp.enable.3g2=true
media.aac_51_output_enabled=true

#
# system props for the data modules
#
ro.use_data_netmgrd=true

#2013-08-31 kwangbin.yim@lge.com LGP_DATA_TEMPORARY_PATCH_FOR_KK_APP_TEST[START]
#persist.data.netmgrd.qos.enable=true
persist.data.netmgrd.qos.enable=false
#2013-08-31 kwangbin.yim@lge.com LGP_DATA_TEMPORARY_PATCH_FOR_KK_APP_TEST[END]

#system props for time-services
persist.timed.enable=true

#
# system prop for opengles version
#
# 196608 is decimal for 0x30000 to report version 3
ro.opengles.version=196608

# System property for cabl
ro.qualcomm.cabl=false

#
# System props for telephony
# System prop to turn on CdmaLTEPhone always
telephony.lteOnCdmaDevice=1

#Simulate sdcard on /data/media
#
persist.fuse_sdcard=true

#system prop for Bluetooth hci transport
ro.qualcomm.bt.hci_transport=smd

#
#snapdragon value add features
#
ro.qc.sdk.audio.ssr=false
##fluencetype can be "fluence" or "fluencepro" or "none"
ro.qc.sdk.audio.fluencetype=fluence
# LGE CHANGE_S, 2013-10-11, seonghyon.cho@lgepartner.com
#ro.qc.sdk.sensors.gestures=true
# LGE CHANGE_E, 2013-10-11, seonghyon.cho@lgepartner.com
ro.qc.sdk.camera.facialproc=false
#property to enable user to access Google WFD settings.
persist.debug.wfd.enable=1
#property to choose between virtual/external wfd display
persist.sys.wfd.virtual=0

# qualcomm sensors enable
#
# LGE CHANGE_S, 2013-10-29, G2-Task-Sensor@lge.com
# below sensor is default true by HAL source.
#ro.qualcomm.sensors.qmd=true
#ro.qc.sdk.sensors.gestures=true
#ro.qualcomm.sensors.pedometer=true
#ro.qc.sensors.step_detector=true
#ro.qc.sensors.step_counter=true
#ro.qualcomm.sensors.pam=true
#ro.qualcomm.sensors.scrn_ortn=true
#ro.qualcomm.sensors.smd=true
#ro.qualcomm.sensors.game_rv=true
#ro.qualcomm.sensors.georv=true
# LGE CHANGE_E, 2013-10-29, G2-Task-Sensor@lge.com

# qualcomm sensors debugging property
#
debug.qualcomm.sns.hal=i
debug.qualcomm.sns.daemon=i
debug.qualcomm.sns.libsensor1=e

# System props for audio
persist.audio.fluence.mode=endfire
persist.audio.handset.mic=digital
# LGE CHANGE_S, 2013-02-14, tomm.lee@lge.com
persist.audio.voicecall.mic=0
# LGE CHANGE_E, 2013-02-14, tomm.lee@lge.com
persist.audio.voice.clarity=none
# LGE CHANGE_E, 2013-05-09, jungsoo1221.lee@lge.com
persist.audio.aanc.enable=false
# LGE CHANGE, 2013-06-19, heejeong.seo@lge.com
persist.audio.handset_rx_type=DEFAULT
# LGE CHANGE, 2013-12-03, jongyeol.yang@lge.com
use.voice.path.for.pcm.voip=false

#// LGE_CHANGE_S, [Net_Patch_0300][CALL_FRW][COMMON], 2012-05-25, Airplane Mode Pop-Up display property value {
ro.airplane.phoneapp=1
#// LGE_CHANGE_E, [Net_Patch_0300][CALL_FRW][COMMON], 2012-05-25, Airplane Mode Pop-Up display property value }

#System props for vibrator
ro.config.vibrate_type=1

# [blue.park@lge.com] For Blue Error Handler V1.4
ro.blue_handler.level=0

# LGE_CHANGE_S [g2][framework][common] the screen auto-brightness adjustment setting
persist.power.useautobrightadj=true
# LGE_CHANGE_E [g2][framework][common] the screen auto-brightness adjustment setting

# LGE_CHANGE_S [g2][framework][protocol]
persist.radio.add_power_save=1
# LGE_CHANGE_E [g2][framework][protocol]

# LGE_CHANGE_S [g2][framework][common] Increase texture cache size for FHD models (24MB -> 32MB)
ro.hwui.texture_cache_size=32
# LGE_CHANGE_E [g2][framework][common] Increase texture cache size for FHD models (24MB -> 32MB)

# LGE_CHANGE_S [g2][framework][common] Define HW key led feature
lge.hw.frontkeyled=false
# LGE_CHANGE_E [g2][framework][common] Define HW key led feature

# 2013-04-19 Bokyum.Kim (bokyum.kim@lge.com) [A1] Make a property named debug.strictmode and set it to 0 for StrictMode [START]
# Remove this property to save the space for other properties
# debug.strictmode=0
# 2013-04-19 Bokyum.Kim (bokyum.kim@lge.com) [A1] Make a property named debug.strictmode and set it to 0 for StrictMode [END]

# LGE_CHANGE_S [g2][framework][common] change lcd default brightness 149->173
#ro.lge.lcd_default_brightness=173
# LGE_CHANGE_S [g2][framework][common] change lcd default brightness 149->173

# LGE_CHANGE_S, [WiFi][hayun.kim@lge.com], 2013-01-22, Wifi Bring Up
# reserved wifi related property
dhcp.ap.macaddress=
dhcp.wlan0.dns1=
dhcp.wlan0.dns2=
dhcp.wlan0.dns3=
dhcp.wlan0.dns4=
dhcp.wlan0.gateway=
dhcp.wlan0.ipaddress=
dhcp.wlan0.leasetime=
dhcp.wlan0.mask=
dhcp.wlan0.pid=
dhcp.wlan0.reason=
dhcp.wlan0.result=
dhcp.wlan0.server=
dhcp.wlan0.vendorInfo=
dhcp.p2p.dns1=
dhcp.p2p.dns2=
dhcp.p2p.dns3=
dhcp.p2p.dns4=
dhcp.p2p.gateway=
dhcp.p2p.ipaddress=
dhcp.p2p.leasetime=
dhcp.p2p.mask=
dhcp.p2p.pid=
dhcp.p2p.reason=
dhcp.p2p.result=
dhcp.p2p.server=
dhcp.p2p.vendorInfo=
init.svc.dhcpcd_wlan0=
init.svc.dhcpcd_p2p=
init.svc.p2p_supplicant=
init.svc.iprenew_wlan0=
net.dns1=
net.dns2=
net.dnschange=
net.p2p-p2p0-0.dns1=
net.p2p-p2p0-0.dns2=
net.wlan0.dns1=
net.wlan0.dns2=
wlan.driver.status=
persist.sys.security=
persist.sys.hotssid.ksc5601=
wifi.lge.autochannel=
# LGE_CHANGE_S, [WiFi][hayun.kim@lge.com], 2013-01-22, Wifi Bring Up

# LGE_CHANGE_S Audio_Framework: HiFi Sound
# reduce Default minimum length allowed for offload in 30 sec.
audio.offload.min.duration.secs=30
# LGE_CHANGE_E

#ro.fm.module=BCM

#
# ADDITIONAL_BUILD_PROPERTIES
#
ro.build.target_operator=OPEN
ro.build.target_country=COM
ro.build.target_region=COM
ro.lge.swversion=D95520a
ro.lge.swversion_short=V20a
ro.lge.swversion_rev=00
telephony.lteOnCdmaDevice=0
persist.audio.nsenabled=ON
persist.audio.spkcall_2mic=OFF
persist.audio.fluence.voicecall=true
wlan.lge.concurrency=MCC
wlan.lge.supportsimaka=yes
wlan.lge.wifidisplay=both
ro.gsm.sms.disablelog=64
ime_feature_0=keyboard_layout:ko=QWERTY;default_theme:com.lge.ime.theme.zeeblack
ro.config.vc_call_vol_steps=6
ro.config.vc_call_vol_default=3
lge.nfc.vendor=brcm
ro.com.google.gmsversion=4.4_r2
ro.setupwizard.mode=DISABLED
ro.livewallpaper.map=DISABLED
ro.com.google.apphider=on
ro.lge.vib_magnitude_index=0,20,40,60,80,100,120,127
tangible_device_config=B7BCNAOTNA
lge.normalizer.param=version2.0/true/6.2/true/12000/0.55/3400/0.55
ro.config.ringtone=01_Life_Is_Good.ogg
ro.config.notification_sound=Life_Is_Good_Noti.ogg
ro.config.alarm_alert=Good_Morning.ogg
drm.service.enabled=true
bluetooth.chip.vendor=brcm
wlan.chip.vendor=brcm
wlan.chip.version=bcm4335
wifi.lge.patch=true
dhcp.dlna.using=false
persist.hwc.mdpcomp.enable=true
ro.opengles.version=196608
ro.hwui.texture_cache_size=72
ro.hwui.layer_cache_size=48
ro.hwui.r_buffer_cache_size=8
ro.hwui.path_cache_size=32
ro.hwui.gradient_cache_size=1
ro.hwui.drop_shadow_cache_size=6
ro.hwui.texture_cache_flushrate=0.4
ro.hwui.text_small_cache_width=1024
ro.hwui.text_small_cache_height=1024
ro.hwui.text_large_cache_width=2048
ro.hwui.text_large_cache_height=1024
qcom.thermal=thermal-engine
ro.sf.lcd_density=320
persist.fuse_sdcard=true
persist.service.crash.enable=0
persist.sys.ssr.restart_level=3
ro.lge.zwait=false
audio.offload.disable=0
av.offload.enable=0
mm.enable.qcom_parser=37491
vidc.debug.level=1
mm.enable.smoothstreaming=true
net.tethering.noprovisioning=true
persist.lg.data.fd=-1
persist.qcril.disable_retry=true
persist.sys.logkit.ctrlcode=0
ro.vendor.extension_library=/vendor/lib/libqc-opt.so
keyguard.no_require_sim=true
ro.com.android.dataroaming=true
ro.com.android.dateformat=MM-dd-yyyy
ro.carrier=unknown
persist.radio.apm_sim_not_pwdn=1
dalvik.vm.heapstartsize=8m
dalvik.vm.heapgrowthlimit=128m
dalvik.vm.heapsize=256m
dalvik.vm.heaptargetutilization=0.25
dalvik.vm.heapminfree=2m
dalvik.vm.heapmaxfree=8m
lge.signed_image=true
ro.lge.capp_ZDi_O=true
lge.zdi.actionsend=false
lge.zdi.onactivityresult=true
lge.zdi.dragdropintent=false
ro.lge.capp_splitwindow=true
persist.splitwindow.support_all=false
ro.lge.capp_hidenav=true
ro.lge.lcd_default_brightness=149
ro.lge.lcd_auto_brightness_mode=false
ro.lge.audio_soundexception=true
ro.lge.capp_cupss.rootdir=/cust
ro.lge.capp_emotional_led=true
ro.lge.capp_wfd=true
ro.lge.capp_almond=true
ro.lge.capp_smartcard_ac_gp=true
ro.lge.capp_smartcard_ac_gto=false
ro.lge.capp_smartcard_lgril=false
ro.lge.capp_smartcard_uicc=true
ro.lge.capp_smartcard_smartmx=false
ro.lge.qslide.max_window=2
ro.lge.capp_slideAside=true
ro.lge.capp_patch_lockscreen=false
ro.telephony.default_network=9
ro.lge.nfc=true
ro.build.sbp=1
ro.fm.module=BCM
persist.radio.do_not_init_csvt=1
persist.sys.dalvik.vm.lib=libdvm.so
net.bt.name=Android
dalvik.vm.stack-trace-file=/data/anr/traces.txt
ro.qc.sdk.izat.premium_enabled=0
ro.qc.sdk.izat.service_mask=0x0
persist.gps.qc_nlp_in_use=0
ro.gps.agps_provider=1