Help trying to find the kdz file for lg transpyre

[Coltan Trusty]

I suppose the first question is how you got TWRP installed in the first place? Secondly, why are you asking for help here, if the topic has nothing to do with TWRP? This topic is "trying to find the .kdz" for this device. There are other threads more appropriate for your particular issue, and there might even be an answer in one of them.

I seen that on here teehippster57 was also stuck in TWRP so i asked for his help. I dont need TWRP The phone was stuck booting into TWRP. AND my computer wouldnt read so I asked him to see if maybe he could help. I was also looking for the kdz file. The only one that I found was an android 5.1.1 version of the stock verizon software. Which is called VS810PU4_08_ARB.kdz

 

[Father Guido]

I seen that on here teehippster57 was also stuck in TWRP so i asked for his help. I dont need TWRP The phone was stuck booting into TWRP. AND my computer wouldnt read so I asked him to see if maybe he could help. I was also looking for the kdz file. The only one that I found was an android 5.1.1 version of the stock verizon software. Which is called VS810PU4_08_ARB.kdz

Yeah, we all can get the 5.1.1, thanks for looking. If all you need is to get your phone back to working order and don't need root or a custom recovery, flash the kdz that you "can" get in download mode.
Install the Verizon version of the drivers and use the LG Flash tool 2014 available on XDA to perform the flash. You'll then be on full stock 5.1.1.

Sorry I can't hot link to the files or topic you need to read from my phone, but you should have no problem Googling it.

EDIT: Now on a computer at work, here's the link to LG Flash Tool 2014.

 

[WarrantyVoider]

I've checked both VS810PU4_08_ARB01.kdz and MS39510g_00.kdz (for F60). Neither file appears to be encrypted. In other words, I'm able to recreate partition images from the kdz files. So I'm thinking it might be possible to construct a kdz file from partition images. I am still relatively new to Android developments, so if anyone knows about previous attempts to do this, please help me get up to speed.

I have a Tribute, which has no publicly and freely available kdz/tot that I know of. So even if I can manually assemble such a file, I can't test it myself. It seems the latest update has bricked a few phones (supposedly with stock rom and recovery), so having a simple unbricking method would be good for other users.

 

[Father Guido]

I've checked both VS810PU4_08_ARB01.kdz and MS39510g_00.kdz (for F60). Neither file appears to be encrypted. In other words, I'm able to recreate partition images from the kdz files. So I'm thinking it might be possible to construct a kdz file from partition images. I am still relatively new to Android developments, so if anyone knows about previous attempts to do this, please help me get up to speed.

I have a Tribute, which has no publicly and freely available kdz/tot that I know of. So even if I can manually assemble such a file, I can't test it myself. It seems the latest update has bricked a few phones (supposedly with stock rom and recovery), so having a simple unbricking method would be good for other users.

I have the Transpyre and have extracted the latest kdz for this myself. I merged the system.img as well, and can likely mount it for editing with Linux. I wondering if there is a means to pre-root the /system and reconstruct the kdz myself. Can you direct me to the L60 kdz you refer to for comparison? The Transpyre I have *should* be able to be unbricked with the stock kdz as long as the laf (download mode) partition remains.

In the meantime, I think we need to dig around to see if reconstruction of a kdz is even possible. My time is quite limited, but I'm happy to hear that someone else is thinking about this too.
Please keep me up to date with your findings, PM or otherwise

 

[iowabowtech]

I've also thought about kdz construction in the past but thus far haven't figured a way to do it. If anyone else has figured it out, I don't think it's posted publicly. Though it's been a year or so since I delved into the topic, I found nothing on it that led to answers. I think it could be done. We can pull them apart, seems there must be a way to put them back together.

 

[WarrantyVoider]

The F60/MS395 kdz (MS39510G_00) I mentioned can be found here:
http://devtester.ro/projects/lg-firmwares/country.php?country=United+States

Kdz seems to be just a container and it could contain different file types, e.g. .cab, .tot, .dz, .wdb, etc. The two kdz files I mentioned contain .dz+.dll files. I've already spent some time looking at the kdz and dz headers. Speaking strictly about the unencrypted kdz/dz files I checked, I think I can account for most of the non-zero bytes. Some of the zero bytes might mean something, but if we don't alter the structure much, those zeros are probably fine.

For me, one challenge that remains is how to break a large partition image into segments. I know how to manually combine parts into a whole, but I am not sure what restrictions there are if I arbitrarily break an image into parts. The other question is whether the flash tool (or maybe the bundled .dll) would even accept a reassembled kdz. Maybe it'd be simpler to leave most partitions as they are for now, and replace only certain independent partitions (e.g. recovery). I can't say whether any of these strategies would work though. If I had a device to experiment on, I could try to figure out by trial and error.

I could go into more technical details (not sure if this is the right place for them) if someone is able to and wants to try. So far, it's been mostly guesswork on my part.

 

[Father Guido]

I believe the .dll is key. I peeked into one after bricking an LG Realm (sorry about the off topic devices) and trying to flash a kdz from the Exceed 2 (Pretty much the same device, yet it failed). The .dll lists the the devices(s) that it is meant to flash to and may well contain other checks and information (file names/sizes?). The LG Transpyre / LG Tribute / LG Optimus F60 all *seem* to be common as well. If one could succeed in a method to edit the .dll and bypass these checks, it might be possible? I realize such an edit would be quite risky, but worth looking into?

 

[xge]

The F60/MS395 kdz (MS39510G_00) I mentioned can be found here:
http://devtester.ro/projects/lg-firmwares/country.php?country=United+States

I found another kdz file here. it seems to be a different file from what you have. Can you take a look? Maybe you can get something else out of it?

http://aleksanderszablewski.y0.pl/lg-f60-downgrade/

I'm still trying to get my hands on that kdz file for the transpyre from the Chinese website. It may be useless even if we got it but damn it I gotta have it.

 

[WarrantyVoider]

If one could succeed in a method to edit the .dll and bypass these checks, it might be possible? I realize such an edit would be quite risky, but worth looking into?

Device-specific info is likely contained in the .dll. If we already have the .dll for a specific device, let's hope that's enough. It doesn't work as well for me with Tribute, which has no .kdz and thus no .dll yet. I'd have to hope a .dll from a really similar device is enough.

I found another kdz file here. it seems to be a different file from what you have. Can you take a look? Maybe you can get something else out of it?

Thanks. Now I have the firmware image of D390n for reference. MS395 is the North America version of F60 for MetroPCS. I guess D390n is a different version of F60 for a different market. MS395, LS660 (Tribute), and VS810 (Transpyre) are all quite similar. BTW, they are e2nam (Metro), e2nas (Sprint), and e2nav (Verizon), respectively. There's also e2nac (D393 for Canada?), but I haven't looked into that. The D390n is e2n, but looks different in terms of memory and partition layouts. The good news is that D390n10g_00.kdz is also unencrypted and I didn't run into troubles when I tried to create partition images from the kdz file.

 

[BarneyGumble]

It is possible (though a pain) to root the Transpyre on 5.1.1. I know because I did it today. I say it is a pain because you have to do the "9% trick" from http://forum.xda-developers.com/g4/general/lg-g4s-world-root-lg-devices-t3231759
to get the phone into the "diagnostic" download mode, and then root it totally manually.

None of the scripts I found for LG phones would work. I think there is something crippled about the shell in download mode that doesn't allow things like cd or busybox unzip to work. I had to use the push_file and send_command utilities to put all the SuperSu files in there proper places and then fix permissions and SELinux contexts.

If anyone wants more info, I can post more details, but it boils down to unzipping SU on the PC, and using push_file to put each piece (su, Superuser.apk, supolicy, etc) where it needs to go per the updater script in the SuperSU zip. Then you have to go into send_command and set the permssions (chown) and se-linux attributes (chcon) as specified in the updater script.

Somebody smarter than me could surely script it, but I just wanted it out there that it is possible, and hopefully to clear up why the existing scripts don't work.

 

[Father Guido]

It is possible (though a pain) to root the Transpyre on 5.1.1. I know because I did it today. I say it is a pain because you have to do the "9% trick" from http://forum.xda-developers.com/g4/general/lg-g4s-world-root-lg-devices-t3231759
to get the phone into the "diagnostic" download mode, and then root it totally manually.

None of the scripts I found for LG phones would work. I think there is something crippled about the shell in download mode that doesn't allow things like cd or busybox unzip to work. I had to use the push_file and send_command utilities to put all the SuperSu files in there proper places and then fix permissions and SELinux contexts.

If anyone wants more info, I can post more details, but it boils down to unzipping SU on the PC, and using push_file to put each piece (su, Superuser.apk, supolicy, etc) where it needs to go per the updater script in the SuperSU zip. Then you have to go into send_command and set the permssions (chown) and se-linux attributes (chcon) as specified in the updater script.

Somebody smarter than me could surely script it, but I just wanted it out there that it is possible, and hopefully to clear up why the existing scripts don't work.

Thanks a million! Will surely try when I get some free time

Too little time & too many irons in the fire right now

 

[BarneyGumble]

Just an update. Unfortunately it looks like the booloader got updated and the bumped TWRP doesn't work any more.

However I was able to load Xposed with FlashFire and even the G4 Tweaksbox app+module to fix some annoyances. It is a usable phone again.

 

[Father Guido]

Just an update. Unfortunately it looks like the booloader got updated and the bumped TWRP doesn't work any more.

However I was able to load Xposed with FlashFire and even the G4 Tweaksbox app+module to fix some annoyances. It is a usable phone again.

Didn't get a chance to investigate, but good to hear that root is possible.

About the recovery, it seems I read somewhere that they changed the signature, thus the "publicly available" bump is obsolete. I may be (and hope) I'm wrong about this.

 

[Father Guido]

It is possible (though a pain) to root the Transpyre on 5.1.1. I know because I did it today. I say it is a pain because you have to do the "9% trick" from http://forum.xda-developers.com/g4/general/lg-g4s-world-root-lg-devices-t3231759
to get the phone into the "diagnostic" download mode, and then root it totally manually.

None of the scripts I found for LG phones would work. I think there is something crippled about the shell in download mode that doesn't allow things like cd or busybox unzip to work. I had to use the push_file and send_command utilities to put all the SuperSu files in there proper places and then fix permissions and SELinux contexts.

If anyone wants more info, I can post more details, but it boils down to unzipping SU on the PC, and using push_file to put each piece (su, Superuser.apk, supolicy, etc) where it needs to go per the updater script in the SuperSU zip. Then you have to go into send_command and set the permssions (chown) and se-linux attributes (chcon) as specified in the updater script.

Somebody smarter than me could surely script it, but I just wanted it out there that it is possible, and hopefully to clear up why the existing scripts don't work.

I had a just a *little* free time last night to mess with this device again. Would it be too much to ask you to provide a little more info (as in where you left off (where I bolded the quote, etc.). I think I can do it piece by piece as you described, but the SU updater script covers many platforms and I'm a bit unsure of what needs to go where. I'm not well versed in parsing the SU updater script.

As I understand this, we'll push.exe the files where they need to go, then use send.exe to set perms/attributes. What I'm unsure of is which files from the SU.zip we need for this particular device, and where they need to be placed (and the perm/attribs). Again, I'm not well versed enough (yet) to glean this information.

If you can provide this info (or point me in the right direction) I'd be happy to make a .bat file to make this easier for others here once I succeed.

 

[htc.user]

kingroot.net works on 5.1.1, but i can't find a custom recovery that works yet

i'm still looking for the kdz to downgrade to kitkat for the transpyre

 

[Father Guido]

kingroot.net works on 5.1.1, but i can't find a custom recovery that works yet

i'm still looking for the kdz to downgrade to kitkat for the transpyre

No kk kdz available that I know of. If you just want to rid yourself of Kingroot, Super-Sume Pro will take care of that. I'm hoping someone can mod/create a new TWRP for 5.1.1, but haven't actually asked for nor ran across one yet. Other than that, 5.1.1 works fine on my daily driver. I just TiB my data/apps, and dd the /system to backup for now.

 

[Gydrik]

However I was able to load Xposed with FlashFire and even the G4 Tweaksbox app+module to fix some annoyances. It is a usable phone again.

sorry this is probably off topic but it was mentioned above. Does anybody know which version of xposed is working on the Transpyre 5.1.1 i've been trying to flash it with flashfire to no avail.
Also thanks to htc.user and Father Guido. Kingroot and Super sume worked perfectly.

 

[mel4787]

the arm version. v72. plus since twrp was bumped is there anyway to use the updated recovery, build a new twrp from that and bump that one?

 

[Father Guido]

the arm version. v72. plus since twrp was bumped is there anyway to use the updated recovery, build a new twrp from that and bump that one?

I could be wrong, but I think open bump no longer works for the latest boot/recovery. Time permitting, I'll make a flash able 5.1.1 boot/system to work with an already installed "bumped" kitkat recovery. I need to get the latest version of SuperR's kitchen installed first to create it. Busy rebuilding my desktop and am away for the weekend. Will post results/links if successful.

 

[bcrichster]

I could be wrong, but I think open bump no longer works for the latest boot/recovery. Time permitting, I'll make a flash able 5.1.1 boot/system to work with an already installed "bumped" kitkat recovery. I need to get the latest version of SuperR's kitchen installed first to create it. Busy rebuilding my desktop and am away for the weekend. Will post results/links if successful.

@SuperR has added a smatter of plugins to his Kitchen last week or so..

You ppl who are unaware of his excellent SuperR Kitchen, check it out.. Very useful and constantly maintained:
http://forum.xda-developers.com/showthread.php?p=62845957

 

[Father Guido]

Can anyone confirm whether or not LG changed the signing key for open bump? If so, we're screwed bumping the latest recovery(s) and will need to rely on older (proven working) ones. No means to downgrade from LP to KK without a kdz, and even if found it might result in a brick.

 

[mel4787]

so how was lg's signing tool used? in other words how did we get hold of it and bump the recovery

 

[bcrichster]

so how was lg's signing tool used? in other words how did we get hold of it and bump the recovery

Need a PC & terminal

 

[mel4787]

How do we get a hold of the LG signing tool to bump the recovery

 

[Father Guido]

How do we get a hold of the LG signing tool to bump the recovery

Google "open bump" and you'll find it. Originally a Linux script, but someone ported it for Windows users too. Unsure if it still works due to the signing key being leaked in the open (hence probably changed). There was a big pissing contest over on XDA a year or so ago about it.