Possible root method for Sprint ONLY, need tester (will possibly brick phone)

[Honestly Annoying]

Hey guys, talking to tungkick again and came up with something that MIGHT work. It might brick your phone though, so does anyone have a phone that they would be willing to test this on? It is a way to unlock bootloader

Please PM me as soon as possible

 

[Coycaine]

Anyone remember what variant of the G5 Fredo had?

 

[Honestly Annoying]

Anyone remember what variant of the G5 Fredo had?

He has (had) a few posts on the Sprint forums, i don't know much about him though... seemed to bring more trouble than help. Would you be willing to test our method?

 

[solitarywarrior1]

Got an idea of the brick/success odds? I'm willing to test, but she's my daily too.

 

[majedalanni]

Any luck so far?

 

[fenguepay]

I'd be willing to be a tester if you tell me the kind of risk associated with your method

Sent from my LGLS992 using XDA-Developers mobile app

 

[schizoidd]

Put my daily up

I am willing to give it a shot. U only love once. What's life without a little risk

 

[Honestly Annoying]

got an idea of the brick/success odds? I'm willing to test, but she's my daily too.

i'd be willing to be a tester if you tell me the kind of risk associated with your method

sent from my lgls992 using xda-developers mobile app

i am willing to give it a shot. U only love once. What's life without a little risk

removed: Bricks device!!! No devices were hurt luckily

 

[schizoidd]

well there's only one way to find out....

 

[Honestly Annoying]

well there's only one way to find out....

So you are willing to test? Glad we have done risk takers

 

[schizoidd]

f*%& yeah

 

[l33tlinuxh4x0r]

As long as there isn't any device check in LGUP then you should be able to flash a t-mobile tot. Also the cellular radio will be the only thing that might brick. You should be able to flash back to sprint the same way that you flashed the t-mobile tot. Also that should fix the radio. Worst case scenario you loose your efs aka esn, imei and meid. However, they can be restored if you know how. In my opinion this sounds like it should work. I don't have a g5 and my g4 is in for repair so I cannot test currently. If someone tests this let us know if it works.

 

[Honestly Annoying]

As long as there isn't any device check in LGUP then you should be able to flash a t-mobile tot. Also the cellular radio will be the only thing that might brick. You should be able to flash back to sprint the same way that you flashed the t-mobile tot. Also that should fix the radio. Worst case scenario you loose your efs aka esn, imei and meid. However, they can be restored if you know how. In my opinion this sounds like it should work. I don't have a g5 and my g4 is in for repair so I cannot test currently. If someone tests this let us know if it works.

There's a DLL check in LGUP, but I think tungkick can JTAG it

 

[l33tlinuxh4x0r]

There's a DLL check in LGUP, but I think tungkick can JTAG it

The dll is fine... On the G3 we used to have a dll that would allow flashing different versions from different carriers. That was back in the LG flash tool days though. I am pretty sure that the dll for LGUP allows this already but the only people that know for sure are those that have tried it and @autoprime.

 

[Honestly Annoying]

The dll is fine... On the G3 we used to have a dll that would allow flashing different versions from different carriers. That was back in the LG flash tool days though. I am pretty sure that the dll for LGUP allows this already but the only people that know for sure are those that have tried it and @autoprime.

We have a tester who said that LGUP gave a DLL error. I'll talk to him more though

 

[l33tlinuxh4x0r]

We have a tester who said that LGUP gave a DLL error. I'll talk to him more though

we could also flash the bootloader manually.... However that could really brick the phone if not done correctly.

 

[Honestly Annoying]

we could also flash the bootloader manually.... However that could really brick the phone if not done correctly.

He said he is willing to brick, how could we do that?

 

[l33tlinuxh4x0r]

He said he is willing to brick, how could we do that?

Ok... They have to enter download mode and flash the bootloader partition using dd. First they have to get a list of partitions so they know what partition is the boot loader partition.

mount

should tell you what most of the partitions are. Then do backup your bootloader by doing

dd if=/path/to/block/bootloaderpartiton of=/sdcard/bootloaderbackup.bin

of course you have to change /path/to/block/bootloaderpartiton to the correct location. Then just flash the new bootloader using

dd if=/sdcard/bootloaderyouwanttoflash.bin bs=8192 seek=65536 count=557312 of=/path/to/block/bootloaderpartition

again changing the /path/to/block/bootloaderpartiton to the correct location.



EDIT: I believe that the bootloader is aboot.bin or aboot.mbn when you extract the tot file. It doesn't matter what the file extension is. Someone please correct me if I'm wrong.

 

[Honestly Annoying]

Ok... They have to enter download mode and flash the bootloader partition using dd. First they have to get a list of partitions so they know what partition is the boot loader partition.

mount

should tell you what most of the partitions are. Then do backup your bootloader by doing

dd if=/path/to/block/bootloaderpartiton of=/sdcard/bootloaderbackup.bin

of course you have to change /path/to/block/bootloaderpartiton to the correct location. Then just flash the new bootloader using

dd if=/sdcard/bootloaderyouwanttoflash.bin of=/path/to/block/bootloaderpartition

again changing the /path/to/block/bootloaderpartiton to the correct location.

What operating system are you using for this? And where do i run this code, just through command prompt?

 

[l33tlinuxh4x0r]

What operating system are you using for this? And where do i run this code, just through command prompt?

If you are in download mode you can run commands as root on the phone. The commands can be run using send_command.exe on windows.

OK I uploaded a zip with send_command.exe in it

To use it open cmd prompt and type.

Send_Command.exe \\.\COM4

replacing 4 with whatever your com port is (you can find this under device manager com ports)

You should see a # where you can type commands as root. Also type mount in adb to find the partitions... Then post it back here so I can have a look. I will try to tell you exact commands to use if I can find the partitions. Thanks