FORUMS
Remove All Ads from XDA

[BOOTLOADER][UNLOCK] working D620(r)

311 posts
Thanks Meter: 336
 
By Zaaap72, Senior Member on 25th July 2014, 02:31 PM
Thread Closed Email Thread
If you try it, do it on your own risk.
I'm not responsible if you brick your device.


On the Russian forum '4PDA' i found a link to stock and hacked bootloaders (aboot). There you can find a hacked bootloader for G2 mini D618
The original topic on 4PDA.ru is here!

I was able to hex analyse the bootloaders of six different LG phones.
The hacks all follow the same rules.

After the byte chain 20 00 EB 00 00 50 E3 E0 FF FF 0A the next 4 or 12 byte are replaced with allways the same 4 of 12 byte:

4 Byte: DF FF FF EA (Confirmed working)
or
12 Byte:00 00 A0 E3 00 00 50 E3 DD FF FF EA

I could not figure out a rule when they used the 4 Byte or the 12 Byte method because the 16 byte after the initial chain look nearly the same with slide differences.

So, i patched the aboot.bin of my D620r, which is the same aboot as D620 in both ways.

There seams to be other about.img for d620 / d620r out there.
I can NOT confirm that this method works for them.


I can confirm that the 4 Byte modified aboot.img unlocks the bootloader and you can use custom kernels with it.

If you want to try on your own: (Do it on your own risk)
Code:
Get aboot.img and abootb.img:
Use "ADB SHELL" or a Terminal Emulator:
dd if=/dev/block/platform/msm_sdcc.1/by-name/aboot of=/sdcard/aboot.img
dd if=/dev/block/platform/msm_sdcc.1/by-name/abootb of=/sdcard/abootb.img

Open each with a hex editor.
Search for the byte chain 20 00 EB 00 00 50 E3 E0 FF FF 0A
Make sure that it exists only once.
Replace the next 4 byte by DF FF FF EA.
You will get: 20 00 EB 00 00 50 E3 E0 FF FF 0A DF FF FF EA

Save aboot.img as aboot4.img and abootb.img as abootb4.img

Do it on your own risk!
Flash them back:
dd if=/sdcard/aboot4.img of=/dev/block/platform/msm_sdcc.1/by-name/aboot
dd if=/sdcard/abootb4.img of=/dev/block/platform/msm_sdcc.1/by-name/abootb
If you don't understand this instructions then don't even try it!
I will not help noobs, it is to dangerous and i don't want to brick your phone. Stay on stock, it is a good phone anyway and get more knowledge by reading the XDA forum.

This is not a boot.img! Don't try to flash as boot.img with any app!


What next?
Try a custom recovery!

Unfortunately the hidden menu doesn't give us a hint on unlocked or locked bootloader.

Back up your original recovery!

Than you can flash a recovery from HERE.

If you get an security error the unlock failed and you can reboot to android (long press power button) and flash your backup.

If it doesn't start the recovery but shows some text on your screen mentioning 'fastboot' or the LG logo stays for more than 5 minutes you are probably unlocked, but the recovery is not working for you.
Then flash your backup and go to the recovery thread, post your boot.img (not aboot) there and ask kindly to port CWM or TWRP for your device.

Else you will have a phone with an unlocked bootloader and custom recovery!
Congratulation!


Zaaap

If you try it, do it on your own risk.
I'm not responsible if you brick your device.
Do not use attached aboot for D620K it is different.

LG D620r aboot.img modified with DF FF FF EA
Attached Files
File Type: img aboot.img - [Click for QR Code] (2.00 MB, 17276 views)
The Following 29 Users Say Thank You to Zaaap72 For This Useful Post: [ View ] Gift Zaaap72 Ad-Free
 
 
25th July 2014, 03:37 PM |#2  
Vagelis1608's Avatar
Senior Member
Flag Athens
Thanks Meter: 840
 
More
You can flash this and see if it boots w/o the security error caused by a locked bootloader. If it does, then you were successful!

Oh, and push the file to /cache so it's easier to flash.

Sent from my D620R [Stock 4.4.2]
The Following User Says Thank You to Vagelis1608 For This Useful Post: [ View ] Gift Vagelis1608 Ad-Free
25th July 2014, 09:32 PM |#3  
Zaaap72's Avatar
OP Senior Member
Flag Amberg
Thanks Meter: 336
 
More
Quote:
Originally Posted by Vagelis1608

You can flash this and see if it boots w/o the security error caused by a locked bootloader. If it does, then you were successful!

Oh, and push the file to /cache so it's easier to flash.

OK, i tried [Testing] CWM Recovery G2 Mini [D620]

It did not work but i didn't get a security error and my phone operates normal.

So I'll share my aboot.img with you.

You can try it on your own risk.

I personaly used the DF FF FF EA one.


Zaaap
The Following 3 Users Say Thank You to Zaaap72 For This Useful Post: [ View ] Gift Zaaap72 Ad-Free
25th July 2014, 10:34 PM |#4  
Vagelis1608's Avatar
Senior Member
Flag Athens
Thanks Meter: 840
 
More
Quote:
Originally Posted by Zaaap72

OK, i tried [Testing] CWM Recovery G2 Mini [D620].

It did not work but i didn't get a security error and my phone operates normal.

So I'll share my aboot.img with you.

You can try it on your own risk.

I personaly used the DF FF FF EA one.


Zaaap

How did the people at 4pda got into bootloader mode?

Sent from my D620R [Stock 4.4.2]
25th July 2014, 10:54 PM |#5  
Zaaap72's Avatar
OP Senior Member
Flag Amberg
Thanks Meter: 336
 
More
Quote:
Originally Posted by Vagelis1608

How did the people at 4pda got into bootloader mode?

Sent from my D620R [Stock 4.4.2]

I don't know. I don't speak any russian. And google translate is not as good.
Their main objective is the L90

I now flasched a TWRP image for L90. Like expected it did not work.

BUT - It brings me in fastboot / bootloader mode.

So, what next?


Zaaap
25th July 2014, 11:11 PM |#6  
Vagelis1608's Avatar
Senior Member
Flag Athens
Thanks Meter: 840
 
More
Try this command to see if you actually are into bootloader mode: fastboot devices
If it shows your device, then that means that you have successfully hacked the bootloader (or aboot, whatever) and thus gained access to fastboot commands.

Sent from my D620R [Stock 4.4.2]
The Following User Says Thank You to Vagelis1608 For This Useful Post: [ View ] Gift Vagelis1608 Ad-Free
25th July 2014, 11:14 PM |#7  
khashayar_khk's Avatar
Member
Thanks Meter: 9
 
More
Quote:
Originally Posted by Zaaap72

On the Russian forum '4PDA' i found a link to stock and hacked bootloaders (aboot).

There you can find a hacked bootloader for G2 mini D618
This is not for G2 mini D620

But i was able to hex analyse the bootloaders of six different LG phones.
The hacks all follow the same rules.

After the byte chain 20 00 EB 00 00 50 E3 E0 FF FF 0A the next 4 or 12 byte are replaced with allways the same 4 of 12 byte:

4 Byte: DF FF FF EA
or
12 Byte:00 00 A0 E3 00 00 50 E3 DD FF FF EA

I could not figure out a rule when they used the 4 Byte or the 12 Byte method because the 16 byte after the initial chain look nearly the same with slide differences.

So, i patched the aboot.bin of my D620r, which is the same aboot as D620 in both ways.

I'm willing to risk my phone by flashing them if someone could tell me how to check that unlock was successfull.

Zaaap

hi im using D618 how and which one i should use?could u please make a tutorial
25th July 2014, 11:50 PM |#8  
Zaaap72's Avatar
OP Senior Member
Flag Amberg
Thanks Meter: 336
 
More
Quote:
Originally Posted by khashayar_khk

hi im using D618 how and which one i should use?could u please make a tutorial

None of the ones i have posted.

You can follow the 'hacked' link.

But if you don't know what to do with it, you better leave it alone. You could brick your phone.

Zaaap
25th July 2014, 11:59 PM |#9  
Zaaap72's Avatar
OP Senior Member
Flag Amberg
Thanks Meter: 336
 
More
Quote:
Originally Posted by Vagelis1608

Try this command to see if you actually are into bootloader mode: fastboot devices
If it shows your device, then that means that you have successfully hacked the bootloader (or aboot, whatever) and thus gained access to fastboot commands.

Yes, I have access to the fastboot commands.
fastboot devices shows my device.

But what now?

Zaaap
26th July 2014, 07:41 AM |#10  
khashayar_khk's Avatar
Member
Thanks Meter: 9
 
More
Quote:
Originally Posted by Zaaap72

None of the ones i have posted.

You can follow the 'hacked' link.

But if you don't know what to do with it, you better leave it alone. You could brick your phone.

Zaaap

well ok so i wait for someone to make tutorial bcuz i just bricked my i other phone(xperia c)and it cost me alot.
26th July 2014, 09:59 AM |#11  
Garcia98's Avatar
Senior Member
Flag Salamanca
Thanks Meter: 1,440
 
Donate to Me
More
Hi!

I compiled a kernel from LG sources for D620, but there was no way to test it with locked bootloader, and as I don't own this phone I ask you to test it flashing it via recovery or extracting boot.img from zip and using fastboot to flash it

I need to know if this kernel works before making recovery: https://www.mediafire.com/?rg30b9qq4qx9e6q
The Following 2 Users Say Thank You to Garcia98 For This Useful Post: [ View ] Gift Garcia98 Ad-Free
Thread Closed Subscribe to Thread

Tags
aboot, bootloader, unlock
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes