From an Android OTA package to kernel symbols and root

Recovering a legacy Android kernel's symbol table from an OTA image, restoring symbols in IDA, and adapting three privilege-escalation exploits.