yashsingh1/xdaforums huggingface dataset:
[General Topics] MotoJunkie01:
Look at it this way: the phone is 4G/LTE capable. Although the Zone 3 primarily uses CDMA, LTE, in and of itself is not a CDMA technology. Thus, technically speaking, any phone capable of accessing the LTE bands is GSM capable as well. LTE is, and always has been, a GSM technology standard. The UICC (SIM card) in a CDMA device is present for one reason only -- as a platform for 4G/LTE network access. Around a year ago when I first got my Zone 3, I modded the build.prop, the telephony configuration and telephony system apps, and used it successfully on AT&T & T-Mobile (with edits to the APNs of course). On T-Mobile I was never able to enable MMS, but voice, SMS, and data worked fine. When I get the time (I am constantly traveling this time of year) I will re-write a comprehensive guide on the mods for GSM use. You may rest assured the Zone 3 is GSM capable.

I am in hopes, that in a month or two, myself and [MENTION=8236433]Astr4y4L[/MENTION] will have broken through the /aboot puzzle and have TWRP, a universal rooting tutorial for all Zone 3 firmware "variants," and a flashable GSM enabling mod.

LG reports that the specs for this device include the following bands:

LTE 2 / 4 / 5 / 13

WCDMA 1 / 2 / 5

CDMA 850 / 1900

GSM 850 / 900 / 1800 / 1900
[General Topics] Astr4y4L:
I can confirm having a working data connection with cricket simcard on my last device... but i was experimenting on pipeing the voice over that connection when i killed it...

I can't figure out how i got it working at all again...

Some combination of framework + build.prop + pm disable tweaks...

Like some elusive voodoo...

I cant even get it to see the network now...
[General Topics] jazzdglass:
I saw this via Google

http://www.internauta37.altervista.org/en/patch-fully-enable-gsm-cdma-global-phones-android

There's a zip to flash the patch but I can't since I have no custom rom. I tried flashfire but it wouldn't work with king root. Rashr doesn't seem to be capable of flashing zip saw only option to flash recovery and kernel.

Challenge right now is how to replace king root with super su? I'm on pp2 rooted with latest king root.

I also tried to manually edit build.prop line that sets default network to GSM, but that still didn't bring service.
[General Topics] Astr4y4L:
Re replace kingroot

Use my zip package linked to in firsts post

File called mrw

Just read the read me its all in there

---------- Post added at 04:11 PM ---------- Previous post was at 03:58 PM ----------

here's the files

http://astrayalslanding.dynu.net:88/Android_Development/Projects/zone3_root.zip

---------- Post added at 04:16 PM ---------- Previous post was at 04:11 PM ----------

@MotoJunkie01

I havent gotten anywhere yet on aboot...

I seems to be an issue of stripping the header then splitting the image and thats where iv been stuck
[General Topics] MotoJunkie01:
You're ahead of me brother. I have free time this week. I'm going to help all I can.
[General Topics] Astr4y4L:
Found this

http://www.jetbrains.com/decompiler/download/download-thanks.html?platform=windowsWeb

But i dont have a windows conputer to run it on....

---------- Post added at 07:40 PM ---------- Previous post was at 07:39 PM ----------

Wonder if we can modify lgup or even aboot.bin with it?
[General Topics] MotoJunkie01:
I'll give it a try and see. Thanks
[General Topics] Astr4y4L:
Proof of gsm

/system/etc/rssi.xml

##########################

<?xml version="1.0" encoding="utf-8"?>

<RSSI>

<!-- RSSI Level Start-->

<item name="levelNum">5</item>

<!-- RSSI Level END-->

<!-- LTE Start-->

<!-- mLteRsrp, mLteRssnr, mLteSignalStrength, mLteRsrq -->

<item name="mLteRsrp">4,-85,-95,-105,-115</item>

<item name="mLteRssnr">4,130,45,10,-30</item>

<item name="mLteSignalStrength"></item>

<item name="mLteRsrq"></item>

<item name="mLteRsrpOffset">4,-91,-101,-111,-115</item>

<!-- LTE END-->

<!-- CDMA & EVDO Start-->

<!-- cdmaDbm, cdmaEcio, evdoDbm, evdoSnr -->

<item name="cdmaDbm">4,-75,-85,-95,-99</item>

<item name="cdmaEcio">4,-90,-110,-130,-150</item>

<item name="evdoDbm">4,-65,-75,-90,-105</item>

<item name="evdoSnr">4,7,5,3,1</item>

<!-- CDMA & EVDO END-->

<!-- GSM Start-->

<!-- asu_gsm, asu_umts, aus_etc -->

<item name="gsmDbm">4,-85,-94,-98,-103</item>

<item name="umtsDbm">4,-57,-72,-88,-101</item>

<!--item name="asu_etc">4,6,4,2,1</item-->

<!-- GSM END-->

</RSSI>

---------- Post added at 10:12 PM ---------- Previous post was at 09:26 PM ----------

@MotoJunkie01

Is this the sister phone?

http://www.gsm-specs.com/lg-rebel-2-lte/
[General Topics] MotoJunkie01:
Yes. The LG Rebel LTE, Rebel II, LG K4, LG Optimus Zone 3, and the LG Spree LTE, from everything I can tell, are essentially the same device. Interestingly, LG's OEM specs of the Zone 3 list it as a GSM Quad Band device: 850/900 1800/1900. Quad Band, of course, makes the device technically compatible with all GSM networks in the world.
[General Topics] Astr4y4L:
What we need is firmware from one of these so i can pull all the system apps settings and bianarys out to see what we can frankinstien together
[General Topics] MotoJunkie01:
Frankenstein may just well work. The K4 -- to the best of my knowledge -- has had some major development such as TWRP & custom ROMage. I'll search right now for a kdz or TOT package for the K4 (which is primarily GSM also).
[General Topics] MotoJunkie01:
Check this out. It may help to decompile. A pre-rooted stock ROM for the K4. Lollipop 5.1.1

https://xdaforums.com/android/general/rom-lg-k4-k120e-prerooted-stock-rom-t3545353

Well maybe not. I just noticed this particular K4 variant has a MediaTek board platform. Here is a stock firmware link for the K4 synonymous to the Zone 3.

https://lg-roms.com/official-firmware/LG K4-LGVS425PP/VS425PP7_01_0125_ARB00/
[General Topics] Astr4y4L:
So does anyone wanna tell me what all these network configuration files in

/system/etc/lgodm/

Are for and how to read them

I believe these actually may control our actual network (LTE or CDMA or GSM)

i know everyone would like to install a magical app to tweak these settings but im thinking more along the lines of a package containing resource files and a shell script that does the job...

---------- Post added at 03:40 PM ---------- Previous post was at 03:09 PM ----------

tried the bottom link all i get when i download is a 404 error page

---------- Post added at 03:43 PM ---------- Previous post was at 03:40 PM ----------

also looking at th file name that i tried to download it looks like the same as vs425pp7 that .we have down to the arboo thing in the file name...

are we sure this is not just the same file we have ?

---------- Post added at 03:49 PM ---------- Previous post was at 03:43 PM ----------

looking at the other link looks like your right (smartphone flash tool = mediatek board[mtk])

too bad we cant make spflashtool work with qualcom so we could just nuke our boards and cook whatever rom we want....

stupid msm ....

of course spflashtool helped me destroy my rca tablet (voyager 2)

---------- Post added at 04:31 PM ---------- Previous post was at 03:49 PM ----------

Well now.... what about this marshmallow update for k4 im downloading from lg software server right now ... im gonna see if it'll be compatable with our hardware...

Maby itll flash...

If so i'll start working on a way to root that too...
[General Topics] Astr4y4L:
check out what happened when i run strings on lgup installer

http://18.220.133.114/stuff/lgup-msi-strings.txt

i think if we modify a dll we can bypass model and version checks
[General Topics] Astr4y4L:
almost had marshmallow now i got a brick....

did lgup refurbish to pp2 pulled battery on boot screen {android optimizeing apps}

then tried to use lgup FOTA upgrade option to "VS42525A_01_0217_ARB00.kdz" which should be the marshmallow update for k4 verizon....

i got to 99% and my stinking p.o.s pc glitched and i got stuck in downloadmode tried to just pull battery and reboot but nothing black dead screen no response to hardware buttons but i have hope because linux sees it as

##############################

──╼ $lsusb

Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

Bus 006 Device 002: ID 046d:c52b Logitech, Inc. Unifying Receiver

Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

Bus 001 Device 003: ID 0bda:0158 Realtek Semiconductor Corp. USB 2.0 multicard reader

Bus 001 Device 002: ID 5986:0137 Acer, Inc

Bus 001 Device 005: ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)

Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

################################

as a {Qualcomm, Inc. Gobi Wireless Modem (QDL mode)}

so its stuck in a low download-mode.

@MotoJunkie01

i'm trying to figure out the guts now check this out

( https://xdaforums.com/showthread.php?t=2086142 )

i think this could be our ticket if i can make it work...
[General Topics] MotoJunkie01:
Dammit I hate to hear that. Have you tried LG Flash Tool 2014 or any other flashing utilities to see if your device gets recognized? Qualcomm's QPST Emergency Flash Mode can also be used in your situation (in theory and proof of concept anyway).
[General Topics] Astr4y4L:
Ok so short story....

I am bricked bigtime...

So I am out of a device to continue development unless anyone wants to donate devices...

The marshmallow update may very well work for someone who doesnt care if they get a brick

Its at

http://18.220.133.114/android/testing/VS42525A_01_0217_ARB00.kdz

If any one wants to try...

I kinda wanna cry....

Pc glitched its an old amd laptop p.o.s

I was at 99% WTF!!!!

Anyhow ill be fooling with lgup trying to bypass security checks and modle version checks to get any one of my other bricks going....

Wish me luck and somebody pm me to say u wanna send 15 of these devices for the Zone3 frankinstine project . This is getting expensive for a guy like me...

---------- Post added at 01:12 AM ---------- Previous post was at 01:07 AM ----------

I am looking at somethings just like that send me ANY info u find...
[General Topics] MotoJunkie01:
Here is a thread on rooting a particular Moto device by first intentionally hard bricking the device and then using Qualcomm's QPST emergency mode to revive the device and flash it with rootable firmware. While this thread focuses on Moto devices, the substance is geared toward any hard bricked device with a Qualcomm board platform. Since the Zone 3 packs a Snapdragon 210, it is possible to revive it using this Python27 based script and the corresponding QPST flashing utility.

https://xdaforums.com/droid-ultra/general/droid-mini-maxx-ultra-root-pogress-100-t3071609
[General Topics] Astr4y4L:
Im going to have to check into this more tomarrow.

But it does look promising from here...

Maby this will become the next breakthrough...

Im going to format a new hdd for windows to work on only this and lgup modifications
[General Topics] MotoJunkie01:
Cool. Yeah I've got a 500GB HDD for my HP laptop with nothing but firmware packages and ROMs for my various devices. Mainly budget devices but a couple of flagships also.
[General Topics] Astr4y4L:
;

i wonder if anyone else can try to flash the marshmallow update of dooom... :)

Really think it would be cool if it will take and what would that look like...
[MENTION=8451188]SquaredDev[/MENTION] maby
[General Topics] jazzdglass:
Sorry about your brick

Have you simply tried to flash this gsm patch?

http://www.internauta37.altervista.org/en/patch-fully-enable-gsm-cdma-global-phones-android
[General Topics] Astr4y4L:
Yep it changes identifiers in build prop that evidently are needed for lg up to work....

If you mess up after those edits u will have a brick too
[General Topics] MotoJunkie01:
Yes most certainly. [MENTION=8236433]Astr4y4L[/MENTION], have you had any luck recovering your brick? If you can't get it recovered, I will work on having you a device donated for your continued development.
[General Topics] Astr4y4L:
Bro, that would be awsome and very kind :)

As for the brick... nope its probably junk...

Though i have found a form of communication between device and pc its still a primative thing full of guess work and trial & error but i will continue telling it to be a phone even to the point of placeng it flat on the desk and screaming at it

(Your a phone act LIKE IT!!!!)

LOL.

BUT YES A DONATION DEVICE WOULD HAVE ME BACK UP AND RUNNING AGAIN..

found resourcehacker for windows and trying all day to jack&crack LGuP

Yes bro. Pm me and I'll give u a mailing address for the donation device.

And a million thanks for anyone willing to do that!
[General Topics] MotoJunkie01:
Tell you what, I have two spare devices: I have an extra Zone 3 and an extra LG Rebel LTE. PM me with your name and address information and I'll get whichever device you want mailed out by tomorrow during business hours. Oh, and if you want the Zone 3, let me know which firmware package you prefer on it.
[General Topics] Astr4y4L:
pp7 would be great had best work from that one...

Guess it dont matter i'll just root it anyhow...

but AWSOME !!!!!!

ATTENTION XDA I OWE 1 MILLION THANKS TO MOTOJUNKI01 FOR HIS AWESOME GENEROSITY IN DONATING A NEW ZONE3 FOR DEVELOPMENT!!!!

---------- Post added at 07:53 PM ---------- Previous post was at 07:51 PM ----------

Just sent the pm with the mailing info..

Plz let me know u got it...

Thanks,

Astr4y4L
[General Topics] MotoJunkie01:
Got it friend. I'll mail your Zone 3 around noon tomorrow and PM you the tracking confirmation. Thanks again for your hard work and contributions. Do you need the OEM charger also? I have the original box, user guide, etc. I'm including you an 8GB external micro- SD pre-installed and formatted as well. It may come in handy on your work.
[General Topics] Astr4y4L:
Dude u are awsome! Thats the best news all day as far as that gos...

Im on this pos obamma phone on a krappy wifi connection that i managed to hack out of my wifes cricket galaxy amp 2..

Needless to say i had too crack her new phone...so yep

But the chargers and such are not needed and ive got cords from the latest bricks so ...

If u wanna cut the postage cost take everything out and just send the phone and the box.

Thanks again for supporting your Dev's

And anything good that comes from my work you have first dibbs
[General Topics] MotoJunkie01:
That's generous but I don't want your money....I just want your work. Haha. Seriously though, your development is plenty enough for me and I wish I could give more. I know devs work hard. I'm trying to become one myself. It's tough & time consuming.
[General Topics] Astr4y4L:
Just keep digging at it. Thats how i got started...

its a hobby mostly for me this zone3 stuff is the very first work iv released to the public most of my other stuff is custom stuff for particular situations and educational purposes of course

And lots of tools for breaking things down
[General Topics] MotoJunkie01:
You're good at getting on the inside of things. Great reverse engineering. I just compiled a new custom ROM for the Alcatel Ideal (4060A). Posting it tonight. I have you all ready. I restored the phone using Verizon's Upgrade/Repair utility. It is wiped and fresh with VS425PP8. I made sure FRP wasn't enabled. It is charged & ready to ship to you.
[General Topics] Astr4y4L:
Awesome ill be looking foward to that...

I been studying the way lgup and such work and its not unlike how mediatek uses a rom with a scatterfile and spflashtool

And i think after enough time and effort i may stumble upon a way to make lgup flash anyfile.kdz to anydevice on com port

Then we would have a heck of a tool...
[General Topics] Astr4y4L:
Your rom for idael... is that an att device?

I think Tru Wireless is actually giveing those out for obamaphones....
[General Topics] Astr4y4L:
Well just got off work. Had to do a bit of welding today.

Gonna cool down and then fire up my pc and start taking apart lgup again... gotta find the function calls we're looking for and put a break there to skip to next function... seems like it uses .dll files which turnsout are just small single function sometimes multiple function snippits of code that other programs use for particular functions.

In my head it works kinda like how we have busybox multifunction bin. Dumdum.apk needs to move a file or data so it calls a function call to busybox.bin to accomplish the task yet Joe User

Has no idea whats going on behind the curtain he just knows his favorite app Dumdum.apk just updated and now it has new tricks...

Well i figure this works like that and so if i can figure out the function calls we just put a line break there and it skips to the next thing its supposed to do...

But without the source code with the notes and such its a lot of taking this and that apart and following the code backwards then fowards to trace what calls what...

It seems difficult but turns out its kinda kool if u figure it out...

and i just love to take things apart to see how they work..

So yea , im on it !!! we'll see how she go's.....
[General Topics] Astr4y4L:
Deleated-multiple-post

..
[General Topics] Astr4y4L:
but yes there is some very interesting info in this file....

and when we get it all assimilated i believe we can drive our LGuP from inside the .kdz file we flash...

of course there are going to be more roadblocks but we will smash through that krap like a sherman tank and end up with a way to outright flash custom roms on q-fused devices and all...

i mean the OEM Key is in these .dll files somewhere too...

woo thats a lot of data...

head hurts now and i'm going to take a break ... i don't know if it will let me but i'm going to try to (select all + copy + paste) the rest of the info on my next post so all who are secretly scowling about our no rom situation can browse it and read it thairselves maby someone will notice something i haven't yet or get an idea i haven't tried yet....

wooohooo progress !!!! :)

sorry all about this next post its gonna be a long one...

Astr4y4L
[General Topics] MotoJunkie01:
[MENTION=8236433]Astr4y4L[/MENTION] sorry I didn't get your device in the mail today. Been laid up with a migraine. Just now moving around a little. Better now. I'll take it over in the morning first thing and get it shipped.
[General Topics] Astr4y4L:
ahhh welll!!!!!

i'm not able to paste the entire file content here because i'm not so very familliar with Vim or Vi

i use nano usually and gedet or leafpad etc..

but i'll convert it over to plaintext later for all to see

and i guess the guy who wrote it is called

deokhwanjung

according to this line of code here...

(/Users/deokhwanjung/Desktop/common_DLL/base_dll/Source/Process/EFS/EFSManager)

sure wish we had the ip addreass to the workstation this guy was working on...

oh well unless someone can find THAT-GUY we have to do this the hard way...

but i'd love to see the other contents of said workstation :)

---------- Post added at 07:31 PM ---------- Previous post was at 07:22 PM ----------

Oh Yea Brother No Problem ! :)

was wondering at lunch-break today but when i'm welding i learned to leave phones and any other glass objects out of my pockets . slag even smashes gorilla glass screens with the tiniest little drip or splash...

But yea I take you at your word when you tell me somethings going to happen i just believe it and wait to see.

i just hate a nag and i don't like being sweated about any promise i make so i treat others as i would treat myself..

i wasn't going to ask Bro...

but AWSOME :)
[General Topics] MotoJunkie01:
I'm going to take some time and look over the code you posted.
[General Topics] MotoJunkie01:
I heard that and I feel you 100%. I'm about sick of LG & Verizon both. By the way, Verizon persists to violate the 2012 federal guidelines which restrict them from carrier locking the SIM ports on their devices. They are being sued again on a federal class action suit. I hope they get slaughtered.
[General Topics] Astr4y4L:
Well from common sense and the uncanny look at the programmers working directory structure referenced in the code..

I think with the right knowledge this could basically apply to all lg devices...

Which would basically give us as much power and control over our devices as fastboot with unlocked bootloader.. there is already some open source tools to work with laf protocall called lglaf.py

Just google it if u want to.

But this combined with that research would be a possible rout to exploitation..
[General Topics] MotoJunkie01:
Yes, back in the days of the LG G2 & LG G3, we basically used a protocol of nuking the /laf partition (backing it up first of course). As you already know, /laf does two primary tasks: (1) it serves as the device's "Download Mode", and (2) it keeps from accessing fastboot mode. By nuking /laf, you lose download mode, so great caution is needed, because you've just lost your only means to recover the device. Interestingly, /laf has a kernel and a /ramdisk filesystem just like any other boot image. So, when you boot the device with no /laf, and use your volume up button while plugging a micro USB to the device which is connected to your PC, a very interesting thing happens: the application bootloader (/aboot) looks for a kernel (it searches for the kernel in /laf), but it finds none because /laf is nuked. Hmmmmm. So now what happens. The device is forced to boot into fastboot mode. LG, of course, has figured this out. (They read XDA Forums too, lol) Now, in many newer devices you can still access fastboot mode this same way, however, fastboot functions have been disabled. In other words when you type "fastboot oem unlock," the command window will return with a "command not allowed" type error. Gotta love LG. The a@sholes
[General Topics] MotoJunkie01:
By the way [MENTION=8236433]Astr4y4L[/MENTION], I'm going to mail your Zone 3 here in a little bit.
[General Topics] Astr4y4L:
awesome i can barely use this p.o.s as the glass is cracked all to hell..

Im bout to head off to work.

So let me understand u correctly we nuke laf and get fastboot because of the kernel missing but on our hardware lg crippled fastboot because they see what we got going....

But the g2 fastboot worked After laf nuke....

And we know fastboot is controlled by fastboot.c object inside of aboot it's self so if we can replace the aboot maby aboot from g2 will boot us idk.. but if not we gotta get aboot open and replace our fastboot.c object with the one from inside aboot on g2 we can have the same as them when we kill laf. But seriously i think download mode may be ok if we crack lgup...

So we got two roads to choose...

Patch aboot . Nuke laf. And oem-unlock

Or

Patch lg up . Understand the scatterloading structure involved with our own rom if we want to flash a new one.

And build an lg device specific tool call it LGReUP

And flash customized firmware to them all.. i saw places in the code where you can tell it weather or not its a q-fuse weather its locked even setting qcom modem and freakin gps or telephony options.

dont mistake me.

I want custom /aboot and im still working toward that exactly.

But also iv got like 4 of these laying in my drawer gathering dust because i tried the wrong .prop edit and tried to flash a non secure image unsigned to a partition on device and ended up looking at Secure---Boot--Error--1003 or whatever.

So a unlocking/unbricking tool that can flash these without careing about weather or not a Lg sig is present would get me at least 4 working phones from my brick drawer...

---------- Post added at 10:02 AM ---------- Previous post was at 09:54 AM ----------

And speaking of the brick drawer.. does anyone know what to do with a bunch of fried phones and tablets ? I been keeping them for hardware pieces...parts.

They are currently Un recoverable with the tools i have to work with.

And i been thinking about the machine in walmart that gives u money for recycleing phones...