yashsingh1/xdaforums huggingface dataset:
[General Topics] Astr4y4L:
By all means..

I would give them the link to my development page wich always links to my projects as I use a lot of mosh net type connections.

Heres the "document-root" link for finished work.

( http://astrayalslanding.dynu.net:88/Android_Development/ )

Just scroll down and hit the project link

Ill also update that page with a link to the work-in-progress server with the ip address -link.

It'll keep things pretty and in 1 place
[General Topics] MotoJunkie01:
I've changed the filenames in the download link per your recommendations. (PP2, PP4, PP7, PP8). And I've added your link in the OP and have given you due credit for your awesome work .
[General Topics] Astr4y4L:
Wow ! Thanks for that.

I plan to continue this endeavor until we get to the point where we can develop our very own rom.

It might never happen or I may make a breakthrough tomarrow.. we never know...

I really believe the aboot is absolutely necessary for that.
[General Topics] MotoJunkie01:
You have broken a lot of ground in a little amount of time. I do believe we have it narrowed down to /aboot. The sooner we get custom recovery to successfully flash, the sooner we have 100% flexibility with this phone. I am free for the next couple days, so I am going to work with you on this.
[General Topics] Astr4y4L:
I need a good commandline decompiler for ubuntu 16
[General Topics] MotoJunkie01:
I'll see what I can find on the torrent sources. Do you have a specific decompiler I can search for?
[General Topics] Astr4y4L:
no particular preference as long as it doesn't require patching the program to bypass license checks because firstly thats a pain and secondly i'd like to stay open sourced across the board.

i'm used to kali linux which comes with good software but I chose ubuntu on aws because its free... I have turned aws-ubuntu into kali before but it ended up with unstable system...

we need absolute stability for things to recompile correctly .

I guess anything that can handle arm bianary files should work...

i'm going to pull /aboot to /sd_card/aboot from my device

so as to start with out the .img file conversions i performed originally and thats what i'll use for the input to the decompiler....

and we have little-kernal source now just missing the OEM stuff....

so ....

decompile /aboot = OEM blobs for build....

we just "fix" what we want and "brunch" it somewhere...

then i am personally awaiting your new TWRP ...

I Had fun with nethunter playing around but stumbled upon something for the LG Nexus 5 that I am Dieing to try to convert to this platform...

A.O.P.P

but i'll need to be able to have patched kernel and Twrp.

so you see i'm in it for the long run.

let me know if you need anything for what we work on.

Astr4y4L
[General Topics] Astr4y4L:
I am trying to breakdown Aboot for decompilation

dd if=aboot of=aboot.no.header bs=40 skip=1

outputs aboot.no.header but when I try to split that

split -b 1 aboot.no.header

It seems to lock-up everything for a bit then finishes without error.....

But....

ls from that directory now locksup the pc...

And I made it browsable by html and it locks up every webbrowser I try to load it with (local and remotely) so...

The things that make ya say "Hmmmmm......"

Not sure what's going on in there...
[General Topics] SquaredDev:
Roll call. I have a LG zone 3 running pp6 right now stable. I have ran pp7 and pp8 stable. Phone was originally pp5 but then flashed it down originally. I have tried pp4 and pp2 but when it restarts after lgup is done the screen goes white with black lines so I had to update to 6 afterwards. Not using device for service, just a WiFi toy so never activated with Verizon. Cannot root because of pp6+ limitation I apparently have.

Rootethods tried: kingroot and kingroot both with apk and pc. There is a pp8 that I have but I think it is just a security patch with Android.

My main goal is to reach a temproot status or full root
[General Topics] MotoJunkie01:
Have you updated to the current PP8, and then downgraded to PP2?
[General Topics] SquaredDev:
Yes, to no avail. Same screen issue.
[General Topics] Astr4y4L:
building an arm toolchain now...

---------- Post added at 12:34 AM ---------- Previous post was at 12:18 AM ----------

@Motojunki01

Do u feel adventurous?

Wondering what would happen if we flashed the aboot from g2 varient?

Linux identified this hardware as a g2 variety even though we both know its more a K4

---------- Post added at 01:10 AM ---------- Previous post was at 12:34 AM ----------

well I just loaded aboot into this....

( http://www.onlinedisassembler.com/ )

and it is currently "processing the file"

everybody hope this thing can break it down for us.....

could save muuuuuuch time !!!!
[General Topics] SquaredDev:
I'm hoping!!! And man, we really appreciate this effort and will be donating soon as I can... I promise.

---------- Post added at 01:08 AM ---------- Previous post was at 01:06 AM ----------

@Astr4y4L I am willing to flash any thing you come up with as a test dummy. I have no problem if my phone bricks since I have a pixel for daily driver.
[General Topics] MotoJunkie01:
[MENTION=8236433]Astr4y4L[/MENTION], I feel you are close to a breakthrough. I can confirm myself that LG Optimus Zone 3, LG K4, LG Spree LTE, and LG Rebel LTE are essentially the same device. Great thinking! By the way, I own a Rebel if it would be of any use firmware or partition wise. I'd wager that your G2 theory is dead on point.
[General Topics] Astr4y4L:
I'm done for the day...

But would love to see about the aboot exchange theory ...

U feel like pulling aboot from your rebel and flashing it to your zone3 ? don't forget to grab abootbak also...

I'm so stinking currious but this is my daily driver....

Also here's an indication of potential ...

I modified an old version of "wpa wps tester app" and it successfully cracked two different routers from my zone3

So that was a fun exploration for educational purposes

:)

More tomarrow

Also paypal seems to be down alday here...

weird.

Astr4y4L

---------- Post added at 04:55 AM ---------- Previous post was at 04:53 AM ----------

@SquaredDev

I will soon be looking for pp5 package testers...

I will let u know soon as I get something together

Thanks
[General Topics] SquaredDev:
[/COLOR]@SquaredDev

I will soon be looking for pp5 package testers...

I will let u know soon as I get something together

Thanks[/QUOTE]

Alrighty :D Just let me know!
[General Topics] Astr4y4L:
[MENTION=7383447]MotoJunkie01[/MENTION]

I am not having any luck trying to decompile aboot.... think my machines are too limited in ram....

tried online decompiler but has upload max-limit = 256KB

aboot = 2MB

so.....

if anyone can help figure out how to pull apart aboot we will be able to move foward ...

untill then i'm going to focus on injecting root into pp7 system and getting it all wrapped up in .kdz or .tot

that way our brothers with the pp5 can join the Rooted catagory...

please post any advise or suggestions you may have...
[General Topics] MotoJunkie01:
I've not had a lot of experience dealing with bootloader partitions. I definitely think you're on the right path here. If /aboot gets cracked I think we are home free. My goal today is to research modifying/decompiling /aboot. I'll report back to you soon as I find anything useful. I'll also check my torrent sources for a more suitable decompiler. I love your idea on a pre-rooted PP7 in kdz format as well. Our PP5 brothers will be ecstatic.
[General Topics] SquaredDev:
I am hyped! I will be willing to flash test anything with my orignally pp5 hardware!
[General Topics] Astr4y4L:
Ok. after 4 hours of downloads and ftp transfer. I'm about to tear apart pp7

Like I did before to get the modem.img etc..

Only this time I'll try to put it right back together without changes and see if someone...

( [MENTION=8451188]SquaredDev[/MENTION] ) can flash that with lgup giving them a stock unmodified pp7.

If that is successful I think I'll be able to make pre-rooted pp7.

First is pull it apart and put it back together.

If that works I'll seperate /system from pp7.kdz and inject root then repack to kdz...

So wish me luck and no network interruptions
[General Topics] SquaredDev:
Good Luck! I will gladly try to flash! I am actually experimenting with a way to inject a recovery into LGUP while it is updating the device. GOOD LUCK AND NO NETWORK INTERRUPTIONS!
[General Topics] MotoJunkie01:
Godspeed to you. This would be a huge leap of progress for PP5 members, as well as all other members with a Zone 3. My concern on the decompiled kdz is that /system is compiled of a series of fragmented LG UP flashable .bin files. I assume that a Zone 3 running PP7 would need to dump a system.img, convert the image over to the LG UP dependent bin files, place the files accordingly in the kdz structure, recompile kdz, and flash via LG UP. Am I on the right path with that?
[General Topics] Astr4y4L:
pretty close... i'm useing python to dump the chunks from the .dz found in the .kdz then it puts the chunks together into system.img or whatever partition im working on ...

dd if=system.image of=system.img

mount -o loop /mnt/tmp /blablabla/whatever_directory/system.img

and then i con modify whatever i want but only 28MB free space to work in...

then umount /mnt/tmp

dd if=system.img of=system.image

"The next step would be reconstructing the file. There are three steps, turning

the files into chunks, merging them together into a DZ file, and then merging

everything back into a KDZ file. The first step has some quirks."

strategy is to make use of ext2simg

from the Android image utilities

so...

image2chunks --ext4 dzextracted/system.image

mkdz -f kdzextracted/VS425PP7_01.dz -m

then

mkkdz -f VS425PP7_01.kdz -m

then...

hopefully profit...

working on injection for pp7 system image now...

[MENTION=7383447]MotoJunkie01[/MENTION]

heres something I found going through the files i found inside pp7's /system/bin

[ #!/system/bin/sh

if ! applypatch -c EMMC:/dev/block/bootdevice/by-name/recovery:10715136:91eb5525caf26e363b5b5bd98cde67a25327fd27; then

applypatch -b /system/etc/recovery-resource.dat EMMC:/dev/block/bootdevice/by-name/boot:10217472:a2ba73246be874babe265e35b364ff0b11437013 EMMC:/dev/block/bootdevice/by-name/recovery 91eb5525caf26e363b5b5bd98cde67a25327fd27 10715136 a2ba73246be874babe265e35b364ff0b11437013:/system/recovery-from-boot.p && log -t recovery "Installing new recovery image: succeeded" || log -t recovery "Installing new recovery image: failed"

else

log -t recovery "Recovery image already installed"

fi

]

so looking at this might give you ideas for the recovery situation...

but i'm putting together a pre-rooted pp7 system.img

and then i'll try to re-KDZ it...

God I hope this works!!!
[General Topics] MotoJunkie01:
Wow great find. I see the log stated first "installing new recovery image succeeded" and then "installing new recovery image failed". I'm trying to decipher the reason it succeeded then failed. But my thought is /aboot interceded.

Ok I see your conversion method on decompiling, modifying, and recompiling kdz. Makes perfect sense but I see your dilemma with a 28mb limitation. I have a Python based program in mind for you. Getting the link now.
[General Topics] MotoJunkie01:
[MENTION=8236433]Astr4y4L[/MENTION], take a look at this thread. It's not exactly on topic with what we are developing, but it deals with Qualcomm QPST emergency flashing Moto devices which are hard bricked. The software used to compile and flash the firmware files is Python27 based. There are links for the software files.

https://www.google.com/amp/s/xdafor...ini-maxx-ultra-root-pogress-100-t3071609/amp/

To clarify, it's actually a rooting thread. But in order to root with this method, the device must intentionally be hard bricked and completely unresponsive. I know. Crazy right? You'll see what I mean. :rolleyes:
[General Topics] Astr4y4L:
UPDATE:

................................................................................................................................................................................................................................................................................................................

root@ip-172-31-37-241:/var/www/html/android/kdztools# python mkdz.py -f kdzextracted/VS425PP7_01.dz -m

[!] chunk system_754760.bin overlaps!

....................................................................................................................................................................................................................................................................................

WELL ALRIGHTY THEN !!!!

I'm getting somewhere !

I know the above error seems silly to be exited about but I read It as { HELP !!! I Don't fit right anymore ! Trim My Friends Till I Fit In !!! }

---------- Post added at 01:08 AM ---------- Previous post was at 01:04 AM ----------

Well ...

a good breaking point so I'm going to log off and take a break ...

all the work I'm speaking about is publicly browsable at (http://18.220.133.114)

just dig in and if anything catches your eye speak up

---------- Post added at 01:36 AM ---------- Previous post was at 01:08 AM ----------

sorry look closer it's a shell script I found inside the fresh pp7 located at /system/bin/install-recovery.sh

Or some such...

But I think with root access we may be able to exploit this to cause the phone to "accidentally" install our modified recovery instead of stock recovery..

Ofcourse we would have to zero out our /recovery and hide our modded one in /data/local/tmp or something

---------- Post added at 01:44 AM ---------- Previous post was at 01:36 AM ----------

@Motojunki01

Check this out http://18.220.133.114/android/kdztools/dzextracted/
[General Topics] MotoJunkie01:
That looks like a kdz ready to compile. Is that your compiled PP7? I can't look closely right now. Driving. Is it ready?
[General Topics] Astr4y4L:
All thats left is figure out how to trim the chunks

So that I can chunk the modified system.image and not have the end system chunk overlapping the beginning chunk of the following partition
[General Topics] MotoJunkie01:
I see exactly what you mean. Check out this thread.

https://xdaforums.com/showthread.php?t=2179431
[General Topics] Astr4y4L:
I think alot of that would apply... gonna browse the whole thread but the tools they are using are for windows and I'm running on ubuntu 16 lts
[General Topics] MotoJunkie01:
Ahhh. I see. I'll see what I can find for Linux.
[General Topics] Astr4y4L:
[MENTION=7383447]MotoJunkie01[/MENTION]

[ #!/system/bin/sh

if ! applypatch -c EMMC:/dev/block/bootdevice/by-name/recovery:10715136:91eb5525caf26e363b5b5bd98cde67a25327fd27; then

applypatch -b /system/etc/recovery-resource.dat EMMC:/dev/block/bootdevice/by-name/boot:10217472:a2ba73246be874babe265e35b364ff0b11437013 EMMC:/dev/block/bootdevice/by-name/recovery 91eb5525caf26e363b5b5bd98cde67a25327fd27 10715136 a2ba73246be874babe265e35b364ff0b11437013:/system/recovery-from-boot.p && log -t recovery "Installing new recovery image: succeeded" || log -t recovery "Installing new recovery image: failed"

else

log -t recovery "Recovery image already installed"

fi

]

So looking at this again this morning. Wonder if that's the hash for recovery and hash for boot right there....
[General Topics] MotoJunkie01:
Yes it seems to be.
[General Topics] SquaredDev:
I thought I would try to flash the LG K4 firmware to the LG Zone 3... it kept giving me an error, so there was my train of thought broken for today.
[General Topics] MotoJunkie01:
Did you try editing the build.prop and applying the K4 identifiers? We may can fool LG UP into seeing the Zone 3 as a K4, since the two devices are technically the same anyway.
[General Topics] SquaredDev:
I didn't. I can't figure out how to change anything in the kdz. And cannot root because of pp5 hardware, so i don't know how to edit it
[General Topics] MotoJunkie01:
Oh ok. Yes I had forgotten you couldn't achieve any type of root.
[General Topics] MotoJunkie01:
You're a damn good tester. For sure. Very detailed and methodical. I appreciate your work. There is the option of flashing the Zone 3 with LG K4 firmware since they are the exact same phone. I'm looking into that now. I never had a problem with the "downgrading" method I posted because my Zone 3s have always kept VS425PP2. So mine wasn't actually "downgrading" Anyway if you can -- and I can confirm it has been done -- help me look into this K4 idea. Thanks much....

Hey if it is not much trouble, could you link the common .dll needed for the LG-UP flash tool. I am at work and cannot access my stuff. Thanks. I will include it in the OP ASAP.
[General Topics] Metalchic:
I think what is happening here is that both our devices came with VS425PP5 installed from the factory. I hope you are able to get it figured out. And I will be here to test it again if you discover anything. There's no need to apologize, this phone is still pretty new so it makes sense that we don't know much about it yet. Especially since LG seems to be actively fighting against breaking into it.
[General Topics] MotoJunkie01:
No mine actually both came with VS425PP2 and both are fully rooted. My problem with the tutorial is that I couldn't actually confirm the "downgrading" theory because mine was already VS425PP2.
[General Topics] MotoJunkie01:
In the other thread you will notice that I actually provided links to my fully rooted VS425PP2 /system, /boot and /recovery dumps. They are fastboot flashable images. So if booting into fastboot was an option, my prerooted ROM could actually be flashed to other devices.

Here is the thread. http://xdaforums.com/android/general/lg-optimus-zone-3-lgvs425pp-stock-t3319566/page10

See Page 3
[General Topics] MotoJunkie01:
I would like for you to look into my pre-rooted factory VS425PP2 images on the above link. If we can get into fastboot mode, the puzzle may be solved.
[General Topics] roscoemctavish:
I just googled around and found it. Don't know if it is the right one or not but seemed to get past the model not found error initially. I cant post links because my account is too new. Found a common dll file on adroidesage dot com about upgrading a LG v10 to marshmallow. IDK maybe that's the problem.
[General Topics] Metalchic:
no i mean mine and roscoemctavish's phones came with VS425PP5 or something. Mine did not come with VS425PP2 it game with 5. Considering that the tool starts to do something it might be worth looking into. Maybe interrupting the process or picking apart what it's flashing app LGUP is doing might be able to trick the phone into fastboot mode. Or maybe it's just fastboot that responds to a custom set of commands.

Edit: looking at theLGUP application i'm thinking that it might actually be an emulated serial device.
[General Topics] MotoJunkie01:
Oh OK. Good work man. We are going to figure this thing out. Also, a known workaround to get into fastboot on LG devices is to nuke the /laf partition. During bootup when /aboot can't find /laf, it forces boot into fastboot. But without root, nuking /laf may not be feasible.
[General Topics] wperdigon:
any updates on this?
[General Topics] MotoJunkie01:
Maybe so. Was speaking today with the owner of a couple of LG Optimus G series devices. Using LG-UP he has been able to successfully upgrade and downgrade the .kdz firmwares for that device. In turn he is showing me a few of the rudimentary principles of downgrading firmware on LG devices.
[General Topics] tromal:
Hi,

For those who still have root, have you unlocked the phone? were you able to use it with another carrier? like the Moto E last year

Thanks
[General Topics] MotoJunkie01:
Yes. GSM unlock is still holding via root. This device is GSM unlockable in much the same way as the Lg Tribute 5, with replacement node.db and node-journal.db files in /root/carrier/app, and the standard "SPR" edit in build.prop. I'm still running the old LGVS425PP2.
[General Topics] wperdigon:
excellent! so glad to hear this =)
[General Topics] tromal:
Great ! thanks

Hope will soon be able to downgrade it
[General Topics] iHelp101:
I found a way to downgrade. Keep in mind doing this is risky. I used KDZ extractor (XDA thread linked below) on the PP2 KDZ. I extracted the DZ and DLL file. I replaced the DLL just in case with the one from the KDZ (Program Files(x86)/LG Electronics/LGUP/model/VS425PP). I opened LGUP and changed the BIN file to the DZ previously extracted. After that it made it past the initial 9%, flashed modem, etc. It will reboot the device at 80%. This is where I had issues and why I warned you earlier.

For me it would boot, factory reset, reboot, screen would flash, and repeat. This occurred about 10 tens until finally arriving at the Verizon logo and fully booting. I don't know if it was a one time bug with my device or if downgrading can have issues. After fully booting I verified I was on VS425PP2 and was able to root the device. Again, do this at your own risk. In theory if you mess anything up you can boot back to download mode, but would have to update to VS425PP6 (Unless someone has the VS425PP5 KDZ).

http://xdaforums.com/showthread.php?t=2600575
[General Topics] MotoJunkie01:
Great work!!
[General Topics] Merazomo:
I was able to downgrade as well, but my VS425PP5 doesn't like VS425PP2 at all. The phone just keeps bootlooping after every restart. Eventually it boots up, but not after bootlooping 10 to 20 times. VS425PP6 and VS425PP4 boot up just fine without any problems. Other than the boot problem, VS425PP2 seems to be working just fine up until the time I try to root it, then it goes crazy again. I was going to try to flash that "LG Optimus Zone 3 (VS425pp) 5.1.1 Stock ROM, Rooted, Debloated, and injected with BusyBox & SuperSU binaries" image, but every time I boot into fastboot, the bootloop gets me out of fastboot and keeps on bootlooping.
[General Topics] xeduran:
I was able to downgrade as well, but my phone's screen was completely corrupt. It was a white screen with black horizontal lines. The touch screen was still responsive, but I could not see anything. Does the dll matter? If so, I am not sure I used the correct one in the correct path. I was able to get my phone back up and running by flashing VS425PP6 (phone shipped with VS425PP5), but PP2 gave me the corrupt screen issue. It had multiple reboots as well, but finally settled down. Major issue was not having a screen to see what I was doing.
[General Topics] Merazomo:
If it's not too much trouble, which is the method you used to root the device? Was it KingRoot? I used the newer version of KingRoot, and it shuts off the phone on the third-step, triggering the bootloop. Thanks.
[General Topics] iHelp101:
I used Kingroot 4.5 from APKMirror. I did originally have the flashing screen issue that would result in a reboot as I said in my post. But it only happened that one time. I have rebooted my device multiple times to make sure and I never get in this bootloop anymore. I am not sure exactly why it is working for me. It is the main reason I gave a disclaimer since the initial bootloop/flashing screen issue scared me.
[General Topics] SquaredDev:
So, just goofing around with LGUP... I would install pp2 and get the screen glitch.. so I would start flashing it to pp6 but right after it flashed modem and /laf.. i would unplug it before it would start to flash the recovery and system images... i would then restart the phone and the screen glitch would stop and i would have the normal LG logo... BUT, it would boot to the LG logo twice and then throw itself back into download mode. I think the problem going this route is I may not be able to disconnect at the right time and it starts to flash just a hair of the recovery or something... OR it has some kind of check at the end of the flashing procedure to see if the flash completed successfully or not.
[General Topics] Astr4y4L:
Ok what if I make a kdz containing only the system partition from pp2...

Anybody want to see if stupid lgup can flash it????
[General Topics] SquaredDev:
I will flash it :)

---------- Post added at 01:55 AM ---------- Previous post was at 01:54 AM ----------

But I think it needs something in it to tell lgup that it is the correct device