hoping this isn’t a spoiler but thought i’d share my experience after rooting this box. I was able to own the user quickly as much of you have done too. I could find key files that i needed to find but couldn’t find out how they were doing what they were doing. I did the enum stuff. something seemed ‘automated’. I ignored that part in the end and just did what I thought I needed to do with those files.