• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root looking for an adventorous tester for a modified aboot.img file

danhalen1

Well-Known Member
So ive spent the past few days reviewing the modified aboot.img bootloader unlock that was posted, and comparing it to the other bootloaders that were hacked with the same method. The l90 d405, d410, and the ls740 use the same code with the secure boot verify function. The version that was posted for our phone was missing 2 functions that the working versions for other phones had. I have modified our aboot file to include the 2 missing functions.

I am proposing this to anyone under the return/warranty/ or if you are feeling adventurous. I dont know if this will work, id say you should assume it will brick your phone. I cannot try it on my phone as its also my work phone, and i dont have a backup. But if you want to try it let me know and i will pm the link to you. I have various screenshots comparing the different files i can also send if you know things about ARM and bootloaders/aboot.
 
So ive spent the past few days reviewing the modified aboot.img bootloader unlock that was posted, and comparing it to the other bootloaders that were hacked with the same method. The l90 d405, d410, and the ls740 use the same code with the secure boot verify function. The version that was posted for our phone was missing 2 functions that the working versions for other phones had. I have modified our aboot file to include the 2 missing functions.

I am proposing this to anyone under the return/warranty/ or if you are feeling adventurous. I dont know if this will work, id say you should assume it will brick your phone. I cannot try it on my phone as its also my work phone, and i dont have a backup. But if you want to try it let me know and i will pm the link to you. I have various screenshots comparing the different files i can also send if you know things about ARM and bootloaders/aboot.

I guess I'll try it. I have to reflash the phone using linux either way. I will try it out.
 
I tried it and nothing happened. Still the same issues, but I never unbricked my phone. I am able to still flash things to the phone through linux, but It won't boot. Still getting the same issue. If someone can send me the STOCK sbl1.img aboot.img rpm.img and the tz.img that would be great. That way I can unbrick the phone tonight.
 
Been trying to flash all of the files all day. Nothing. It writes to the phone successfully, but it still refuses to boot. IDK what i'm going to do about it. :-/
 
Been trying to flash all of the files all day. Nothing. It writes to the phone successfully, but it still refuses to boot. IDK what i'm going to do about it. :-/
Bummer! Still haven't received JTAG interface yet?

So we still don't know if the new aboot works yet as your phone is jacked and calvinsymm never posted back :(

I wonder if he knows what to do with it.

-=Thanks are always appreciated and Happy Modding=-
 
I added instructions when i sent him the link. Have not heard back from him. Ive sent it to 3 people, 2 had phones that were bricked previously and were still working on unbricking them, the 3rd was calvinsymm.
 
danhalen1, did you notice that mmcblkOp6 partition is aboot, but mmcblkOp9 partition is abootb with the same CSD & CID?

-=Thanks are always appreciated and Happy Modding=-
 
Yes, they are very similar but abootb is missing a critical detail that aboot has. They are identical except for this set of functions at the very end of the file
Abootb is supposed to be the fallback boot file if aboot is corrupted.
2l9mmhy.png
 
I added instructions when i sent him the link. Have not heard back from him. Ive sent it to 3 people, 2 had phones that were bricked previously and were still working on unbricking them, the 3rd was calvinsymm.

I will try it tonight.
EDIT: I tried what you said in the PM. It now shows up as a Qualcomm HS-USB QDLoader 9008 (COM4)
 
Yes, they are very similar but abootb is missing a critical detail that aboot has. They are identical except for this set of functions at the very end of the file
Abootb is supposed to be the fallback boot file if aboot is corrupted.
2l9mmhy.png
Gotcha, btw what version of ida are you using?

-=Thanks are always appreciated and Happy Modding=-
 
im using 6.1
Since i havent had much response, which i understand. Heres images of stock compared to hacked.
dZdZemL.png

This is the aboot that bricked devices
hFRv6NF.png
 
Back
Top Bottom