[General Topics] Astr4y4L:
Sweet!!!

We got someone who's going to work on /aboot that's awesome !!! I haven't had time to get back to that particular piece... here a month or more ago I was in touch with several Rom- developers, long story short they were developing for the bootloader locked K7's " I think can't remember the model think it was K7 or maybe K10"

Anyhow they were relating to me how they found that if they modified the /aboot.bin they were able to patch the signiture-checking mechanism He was Useing IDA pro on windows and said it worked great for several devices...

I wanted to attempt the same for our devices but I don't have that well a grasp on Assembly language and turns out to be a pretty big learning curve for IDA even...

So they offered to patch my aboot so I sent it to them...

He claimed he patched it... I Know for FACT he changed something because when I wrote the binary back to the device It would no longer boot... no , nothing... no screen effect at all no sign of life...

now it sits in the Brick-box (DRAWER IN DESK GOT FULL) and I just repurposed the parts... Screen replacement is fairly easy on these devices once you figure it out ..

[MENTION=7101763]wdthompson[/MENTION] is correct about the devices memory Zone3 1.5 Gb Emmc RAM

K4-121 1gb Emmc RAM Cricket Spree(e1q){k120b} 1Gb Emmc Ram

not entirely sure on the Rebel but i'd bet it's 1 Gb Emmc Ram

so the hardware is technically different BUT I've noticed that if I don't touch the Boot-Stack I can flash a Zone 3 with parts of K121 firmware{only the 8Gb Rom version)

and when doing so I get warnings about the GPT has changed... theres several pieces that are not in the same Partition Locations . but I can still boot the K4-121 on a Zone3 using the Zone3 boot-Stack.

[MENTION=7101763]wdthompson[/MENTION] If you would like some different copies of /aboot to test, I can Break- apart several .kdz's today and load the aboot's in different folders on a directory at the Server, and link you there so that you can examine them...

I think I still have the /aboot--patched that those other guys sent back to us and I can load that up too for a comparison If you would like ? ? ?

It's good to have someone around that can work on this particular part of the project

[MENTION=7101763]wdthompson[/MENTION] I'd like for you to know that Team_AstrayaL is willing to assist you and collaborate on this if you need any-thing...

In fact seems like you , like myself are a Linux Man , so I'm not sure if you have anything like the IDA pro disassembler , I had tried radare2 but couldn't satisfy the dependencies for what-ever reason{not liking all the bug's in the latest ubuntu 17 } So I have IDA Pro and a password for starting it up.

So I'm going to send you a Pm with a link to that and the Password to use it so you don't have to spend the insane amount of money that all that stuff cost ...

I really want to see the security mech. in aboot patched My-self I think fast-boot is great and all if it's not crippled, but it's kinda irrelevant because if we can patch /aboot we can then modify /boot and also write our custom recoveries to /recovery

and sorry everyone but if I can get TWRP to boot on a device I have no need for Fastboot...

But if you read the article I linked you to before about aboot you'll see that Lg and Sammobile are very alike in their Rom's and that means if we change anything in the aboot with-out creating a [dummy-spot placeholder for what we remove we change the code-size and therefor the signature check fails...

But any-how i feel like i'm rambleing on now so check your PM for the IDA link.

Astr4y4L

---------- Post added at 11:04 AM ---------- Previous post was at 10:49 AM ----------

Oh yea here's a thread that deals with the topic, also the

Dev's that I mentioned are over there...

https://xdaforums.com/lg-k10/how-to/bootloader-unlocked-guys-bootloader-t3558810

the Helpful guy was @pvineeth97