I think this is the missing link as after this all commands are given with 2 kilocent commands then 2 kilometr commands in that order so possibly the SIGN command is important but also the fact that the kilocent command is given twice then the 2 kilometr responses are sent but that's just speculation. SIGN is called twice before anything begins to work such as the OPEN or WRTE command and the response should be something like success cmd SIGN INFOSPRO is called 4 times which by reading is setting some sort of properties Snoremaster3000: the 8994 dll is using the same method/magic bytes as the others I looked at, making me think this method is currently even more universal than I thought it would be on MM LG devices.īy attaching a debugger to LGUP I found a couple of new commands making a standalone exe that just does the unlock would be trivial for one off private uses, or if the project maintainers want more info. I prefer not to hoard, but to me this seems to be a beehive I'd rather not kick. The only real challenge I found was that my implementation of the crypto method was broken for that bit size and it took me a while to realize it. I did solve and implement (in C, my python-ability sucks) the challenge response method before posting here previously, with even a basic shell for interactive exec then left it at that as its useless to me with a locked bootloader. Keep in mind too, there is an additional CENT METR "mode" issued before closing the flash handles, though hopefully rebooting via the laf commands would clean up any outstanding handles and related flushes. WRTE when used in official methods uses compression to send the data (given the correct args, typically it just feeds the raw/compressed dz/tot data which I'd assume is just lz or similarly compressed), which probably speeds it up quite a lot over sending just plain raw data. I'll try to set up a QEMU VM during the week Raise USBError(_strerror(ret), ret, _libusb_errno) LGLAF.py: WARNING: Operation timed outĪrray = (self.ep_in, 2**14, timeout=timeout)įile "/usr/lib64/python2.7/site-packages/usb/core.py", line 988, in readįile "/usr/lib64/python2.7/site-packages/usb/backend/libusb1.py", line 833, in bulk_readįile "/usr/lib64/python2.7/site-packages/usb/backend/libusb1.py", line 936, in _readįile "/usr/lib64/python2.7/site-packages/usb/backend/libusb1.py", line 595, in _check LGLAF.py: DEBUG: Hello done, proceeding with commands LGLAF.py: DEBUG: Using endpoints 83 (IN), 02 (OUT)
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |