[LG Optimus 4X HD] BigBoyPL:
Hi, I'm BigboyPL. Maybe some people already know me.

Firstly I don't have LGP880, just GT540 and old KP500.

Probably you are wondering what I'm doing here.

I will answer : I'm helping ppl with LG. Especially with firmwares, flashing and service manuals.

It started in 2009. I've bought brand new KP500 in February. After few months I started modifying a firmware etc.

I was very interested in csmg servers. I looked for a lot of things and after few days I knew almost everything that I've need.

In 2009 it was very easy to crack B2B (just need to change password window to main window ;d) and also pages was very simply.

Also links for firmwares was little different. FW was in .cab extension. It was needed only one page to get list of all .kdz firmwares.

You can look here how it was looked: http://web.archive.org/web/20090508...g/b2c/client/b2c_version_mode.jsp?model=KP500 easy as pie ;d

Then in 3rd quater of 2009 LG has changed many things. Firmwares was in .kdz and were signed to IMEI number, and it's for today. B2C_version_mode page dissappeared.

There was a new pages used in B2B:

ezlooks_to_csmg_noti.jsp - it was used for inform about new .kdz firmwares

global_manual_noti.jsp - it was uded for inform about new drivers, service manuals etc.

You can see it here:

http://web.archive.org/web/20100611...com:9002/csmg/popup/ezlooks_to_csmg_noti.jsp?

http://web.archive.org/web/20101124...le.com:9002/csmg/popup/global_manual_noti.jsp

as you can see it's a bit harder cause you must substitute data to link. To get complete suffix you must use :

http://web.archive.org/web/20100923...mode_country_check.jsp?model=GT540&country=GB

previously you can download service manual from here: csmg.lgmobile.com:9002/csmg/b2c/client/sw_manual_list.jsp?model=KP500&suffix=ADEUSV

now you can just download user manual, pc suite, and drivers only.

Then in 2011 pages was changed to other. ezlooks_to_csmg_noti is now agent_phonesw_notice_list

I make copy of agent_phonesw_notice_list every day. I've backup since 2011, and ezlooks since 2010. I can download any .kdz file which can download B2C at normal update.

In 2012 I found out that LG has beta RNDTESTSW firmwares too.

Since then I'm trying to understand how to get this firmware but vainly.

In 2013 LG has changed authentication in B2B and B2B is logging to LG site too. LG has changed WEBSW to WDLSW parameter updated csmg server and

added parallel header site (csmg.lgmobile.com:9002 is running same as csmgdl.lgmobile.com)

I also found B2B cracked by ooxtcoo on his ftp site. I have 1.4.8.0 and 1.4.9.0 versions.

Many peoples has it too.

I wanted to patch a new version and I found that daniel.wro patched traffic and gained access to the tool. He told me that he used tool called fiddler.

I spent one day to find how that works.

Then I started to look for RNDTESTSW in many programs. First tool that I patched was B2E but I didn't found anything interesting.

Next, at general forum reas0n said that a man called foil uploaded beta version fw for LGE960. I found his profile on xda but he wasn't online for about 2 months.

I found his twitter (f0il) and then our conversation begin.

He told me that I must use PCSyncFTP tool from LG. He added that I will find something in traffic.

For about a month, I struggled with this tool and finally I had to give up cause I found nothing.

I wanted him to say something more but he gives me nothing.

Please, don't spam any messages at his profile cause he won't tell you anything. He is reverse engineer and that't his job. It is obvious that if someone earns money for it why would he tell you for free. Respect it.

I took a different way.

I was looking for "something" in the other tools.

I've edited B2C tool and now I have Retail&Vendor tool.

in B2C you can see 2 links:

First link giving us some RNDTESTSW link

http://csmg.lgmobile.com:9002/csmg/...websw_list.jsp?country=&region=&buyer=&model=

e.g. http://csmg.lgmobile.com:9002/csmg/...list.jsp?country=DE&region=E&buyer=DEU&model= (without model it shows all models)

but I think it giving always outdated links cause

you can see that is uploaded today in 16:28 korean time (GMT+8)

and link is not working.

the second link is

http://csmg.lgmobile.com:9002/csmg/b2c/client/auth_model_check_optestimei.jsp?esn=

if somebody has developer phone after esn= you should type IMEI and it should give something.

And now it's time to reflection. I have many IMEI's from prototype phones (IMEI starts at 0044) and it's not a developer phone.

I think it's used to test hardware, I mean prototype to test does phone works good. Also gsm providers can get this prototype to see how will looks their "additions".

Also companies that are making reviews (e.g. gsmarena) doesn't have developer phones.

I once read somewhere in LG Service Information bulletins that there are phones with yellow imei labels. Such mobiles aren't repaired but send somewhere in LG.

Maybe this is the clue.

here is edited version of B2C: http://www.mediafire.com/?hme6xi15io74jdy

you should put this file in LGMOBILEAX/B2C_Client (in xp C:\Documents and Settings\All Users\Application Data\LGMOBILEAX\B2C_Client)

In Extras tab you have some extra options and tool will work till next update.

[that's not end, I will write more here so refrain from unnecessary comments such : "why do we need it", "wrong forum", "littering" etc.]