[GUIDE] [UNBRICK] Updated Offline Flash Instructions (Post-JB, 14% 17% 20% progress) - LG Optimus L9 P760, P765, P768, P769

My phone could only get into S/W update mode, and using the “UpTestEX” offline method wasn’t working, as during the flashing process (14-20%, depending on current bootloader version). I also had a myriad of other issues along the way, but I found out the steps to a perfect fix for my LG Optimus L9 P769! I was also able to flash the following ROMs with this method: V20H (T-Mobile) and V10B (MetroPCS MS769 — less bloat, MUCH easier to clean with NoBloat).
This process will fix the following issues:
“LG Security Error” msg on boot
“Problem with Communication with phone” error during offline flash method
“Phone not detected!” error during flashing with “KZD_FW_UPD”
Unable to Download / flash with the latest LG customer support tool/PC Suite
Please read the following posts and give thanks:
Offline Flash method:
http://forum.xda-developers.com/showthread.php?t=2085344
Fastboot repair bootloader method:
http://forum.xda-developers.com/showthread.php?t=2292828
You will need:
Small http server running with modified hosts file (link above)
Fastboot package (link above)
Flash package (link to post below)
Instructions:
I randomly messed around and I got the flasher working! Massive thanks to djallen1 for the package—I don’t know if this version happens to have anything different. Here’s how I did it:
1. (using Win7 x64, used the flash package from this post: http://forum.xda-developers.com/showpost.php?p=51639161&postcount=2)
2. I used fastboot to flash ICS x-boot/boot (option 5 here: http://forum.xda-developers.com/showthread.php?t=2292828 )
3. YOU NEED ICS bootloader. Phone will not be detected by tool if you are on JB!!!
4. I uninstalled MSXML (from previous attempts)--not sure if this mattered
5. I uninstalled C:\ProgramData\LGMOBILEAX\B2C_Client (from previous attempts)--not sure if this mattered
6. I set Windows Enabler and UpTextEx to Run in XP SP3 Compatibility mode + Run as admin checked
7. I took a shot in the dark and ran KDZ_FW_UPD as administrator
8. Used “3GQCT” + “EMERGENCY” mode, and selected the KDZ file to flash
9. Put the phone in “S/W Update” mode (press Vol Up, insert battery, insert USB cable)
10. Go into Device Manager (right click “My Computer, click “Manage”, then “Device Manager”)
11. I disabled the “LGE Mobile USB Modem #X” (listed under the “Modems” section)
12. Then click “Launch Software Update”
13. Software update [KDZ] will display two lines, “Launching SW Update” and “Unpacking KDZ”
14. [KDZ] WILL FREEZE / display “Not Responding” THIS IS OK. WAIT PATIENTLY.
15. The window will unfreeze/un-grey out and you will see “|Param = xx” updates. This is the “progress bar”—when you reach 100%, it will restart and your phone will be alive again! (fyi, I had “Model Dll Msg Not Found(200x, 0)” messages throughout this flashing process)
16. Do a Hard Reset (press Power, Vol Down, Home until LG logo shows up, then release power)
17. ENJOY!

็Hard!!
Breex243 said:
My phone could only get into S/W update mode, and using the “UpTestEX” offline method wasn’t working, as during the flashing process (14-20%, depending on current bootloader version). I also had a myriad of other issues along the way, but I found out the steps to a perfect fix for my LG Optimus L9 P769! I was also able to flash the following ROMs with this method: V20H (T-Mobile) and V10B (MetroPCS MS769 — less bloat, MUCH easier to clean with NoBloat).
This process will fix the following issues:
“LG Security Error” msg on boot
“Problem with Communication with phone” error during offline flash method
“Phone not detected!” error during flashing with “KZD_FW_UPD”
Unable to Download / flash with the latest LG customer support tool/PC Suite
Please read the following posts and give thanks:
Offline Flash method:
http://forum.xda-developers.com/showthread.php?t=2085344
Fastboot repair bootloader method:
http://forum.xda-developers.com/showthread.php?t=2292828
You will need:
Small http server running with modified hosts file (link above)
Fastboot package (link above)
Flash package (link to post below)
Instructions:
I randomly messed around and I got the flasher working! Massive thanks to djallen1 for the package—I don’t know if this version happens to have anything different. Here’s how I did it:
1. (using Win7 x64, used the flash package from this post: http://forum.xda-developers.com/showpost.php?p=51639161&postcount=2)
2. I used fastboot to flash ICS x-boot/boot (option 5 here: http://forum.xda-developers.com/showthread.php?t=2292828 )
3. YOU NEED ICS bootloader. Phone will not be detected by tool if you are on JB!!!
4. I uninstalled MSXML (from previous attempts)--not sure if this mattered
5. I uninstalled C:\ProgramData\LGMOBILEAX\B2C_Client (from previous attempts)--not sure if this mattered
6. I set Windows Enabler and UpTextEx to Run in XP SP3 Compatibility mode + Run as admin checked
7. I took a shot in the dark and ran KDZ_FW_UPD as administrator
8. Used “3GQCT” + “EMERGENCY” mode, and selected the KDZ file to flash
9. Put the phone in “S/W Update” mode (press Vol Up, insert battery, insert USB cable)
10. Go into Device Manager (right click “My Computer, click “Manage”, then “Device Manager”)
11. I disabled the “LGE Mobile USB Modem #X” (listed under the “Modems” section)
12. Then click “Launch Software Update”
13. Software update [KDZ] will display two lines, “Launching SW Update” and “Unpacking KDZ”
14. [KDZ] WILL FREEZE / display “Not Responding” THIS IS OK. WAIT PATIENTLY.
15. The window will unfreeze/un-grey out and you will see “|Param = xx” updates. This is the “progress bar”—when you reach 100%, it will restart and your phone will be alive again! (fyi, I had “Model Dll Msg Not Found(200x, 0)” messages throughout this flashing process)
16. Do a Hard Reset (press Power, Vol Down, Home until LG logo shows up, then release power)
17. ENJOY!
Click to expand...
Click to collapse
I have my chioy is eazy than this
http://forum.xda-developers.com/showthread.php?t=2686746

Related

Getting out of Software update mode

I've been trying to flash my p768 device since the update for JB p768 came out.
So I started flashing the KDZ file, followed all the necessary steps and finally when the process is at 17 percent, flashing stopped saying there is a problem between connection of pc and phone. So i did the workoaround, remove the usb cable and wait for at least 10 secs and reconnect, then waited for all the drivers to install. After restarting the whole process it got stack still at 17 percent. Now I cannot get out of Software update mode even if I remove the battery and start the device again. I know I made a newbie mistake..:crying:
Any help is appreciated, thanks a lot.
Hello,
If you were on ICS, you can use this method to unbreak your device :
http://forum.xda-developers.com/showthread.php?t=2085344
If you were on JB, the phone won't be recognized on "S/W Update" screen by the offline method. You must use the online method :
- Remove the lines you put in your "hosts" file ("127.0.0.1 csmg.lgmobile.com" and "127.0.0.1 csmgdl.lgmobile.com") then reboot your computer
- Connect your phone (on the "S/W Update" mode)
- Directly start "B2CAppSetup.exe" : it should detect your phone
- Click on "Customer Support" then "Recovery Phone" (see screenshot on http://forum.xda-developers.com/showthread.php?t=2217710)
- Wait and pray... It can be long because it downloads the last KDZ file from official LG servers
Good luck
EDIT : Important detail : while your phone is in "S/W Upgrade" mode, put back your battery (not empty) inside your phone or else your phone will probably stop during the recovery process.
OperationNT said:
Hello,
If you were on ICS, you can use this method to unbreak your device :
http://forum.xda-developers.com/showthread.php?t=2085344
If you were on JB, the phone won't be recognized on "S/W Update" screen by the offline method. You must use the online method :
- Remove the lines you put in your "hosts" file ("127.0.0.1 csmg.lgmobile.com" and "127.0.0.1 csmgdl.lgmobile.com") then reboot your computer
- Connect your phone (on the "S/W Update" mode)
- Directly start "B2CAppSetup.exe" : it should detect your phone
- Click on "Customer Support" then "Recovery Phone" (see screenshot on http://forum.xda-developers.com/showthread.php?t=2217710)
- Wait and pray... It can be long because it downloads the last KDZ file from official LG servers
Good luck
Click to expand...
Click to collapse
:good: Done! i was on ICS and used cmahendra's method on a different computer and it works! Maybe the first computer i've used is the problem and somehow doesn't communicate well with phone..
Great help mate!:victory:

(GUIIDE) downgrade F320 S/L/K from ota 4.4 to shipped rom,

i successfully downgraded my F320s after i took kitkat ota here is how i did it.i used steps from this thread, http://forum.xda-developers.com/showthread.php?t=2636869 which as follows
[EDIT]: Cleaned the guide up a bit
Install
1. Install the LG drivers downloaded above.
2. Install LGFlashTools v1.5 (but don't run it)
3. Extract the DLL and the TOT files from above and put them in a nice tidy directory
.TOT https://drive.google.com/file/d/0B1kmABKJi1C6TUFaTUJldWxLN3M/edit?usp=sharing
.dll https://drive.google.com/file/d/0B1kmABKJi1C6Z1ZFbnpLYXJ0NmM/edit?usp=sharing
Flash tool https://drive.google.com/file/d/0B1kmABKJi1C6bEpMbHdIVG9XUlk/edit?usp=sharing
Drivers initialization
1. Put the phone into download mode. (Turn off device, keep pressing volume up while plugging in the micro usb cable.
2. Let the phone initialize and install the drivers. Once done, in Device manager, you should see the LG phone listed under COM ports (something along these lines).
3. Find that LG entry in Device Manager, click on Properties, Advanced and then change the COM port to COM41 and close/save.
4. Unplug your phone! Important step.
LGFlashTools
To get this tool to work, you'll need to do a few tricks.
1. Set the computer's date to some time in July 2012 or before.
2. Disconnect the internet
3. Find a serial number or register key for LG flash tool 1.5 (search the web)
4. Execute the LGFlashTools. It should ask you for a key, put it in. Now you should see a dialog where you can load the DLL file and the TOT files that you extracted earlier. Put them both in here. Click ok
Flashing
5. There is a yellow arrow on the top left. Click on it to initialize the process. Once done, it should say "ready/finished" or whatever.
6. Put the phone in download mode again, and plug it into the USB port. LG FLash Tools should start flashing it automatically. When it's done, it'll automatically reboot into your stock Shipped rom and all of your data and internal sdcard files are gone.
i will be uploading the tot file for f320s on my google drive for anyone who needs it, the rest you should be able to get easily on your own.
a big thank you to Seven Winds for the post and everyone who helped. ( please pm me so i can add your name to the Thanks list.)

[How To]Unbrick(Soft-bricked),Root+TWRP L7II P715

WARNING! DO AT YOUR OWN RISK.​
Unbricking your LG L7 P71X with LG Flash Tool 2014. You can root any LG device but choose correct firmware according to device and country.
Downloads :-
Visual C++ Runtime library :- https://googledrive.com/host/0B9l4QOCXUmxXV19jN1ZrTnBwdTQ/VC_RedistInstaller.exe (Install it if you cannot run LG Flash Tool)
LG Flash Tool 2014 :- http://d-h.st/x8Ea
LG United Mobile Driver :- https://drive.google.com/file/d/0B1mULHlillK-eDA3SHRPV093TDg/view?usp=docslist_api
Tutorial :-
*Prepare Phone for flashing :-
1. Install Visual C++ Runtime Library.
2. Install LG United Mobile Drivers.
3. Turn off your Phone.
4. Restart Phone in Emergency Mode by holding volume down button and connecting Phone to pc via usb cable.
5. Now the Phone will have yellow screen.
6. Now your Phone is ready for flashing.
*Flashing the firmware(.kdz file)(Downloads given below) :-
1. Copy kdz file to LG Flash Tool folder.
2. Run LG Flash Tool.
3. Keep the options as :-
- Select type - 3GQCT
- PhoneMode - DIAG
- Select kdz file - 'YOUR KDZ FILE'
4. Click on Normal Flash
5. At the next dialog box just click on Start.
6. In select country and language dialog box, just click on OK
7. After that flashing will start, wait till it reaches 100%.
Note -
*Your Phone will reboot at 95% but its normal.
*Upgrade will take approx 15min.
*You will not lose your data.
Firmware downloads(kdz) :-
Rooted KitKat 4.4.2 L7II P710,P713,P714,P715 :- http://forum.xda-developers.com/optimus-l3-l5-l7-l9-ii/development/kk-kk-kdz-p710-root-t2950532 - by maxx_hr
Rooted JellyBean 4.1.2 :- https://docs.google.com/file/d/0B702cz4m1KcycWlGd3VKOE5VOXc/edit - by ashutoshrathore135
Stock JellyBean and Kitkat for any lg device :- http://lg-phone-firmware.com/
Stock JellyBean and Kitkat for L7II models :- http://lg-phone-firmware.com/firmware-Lg+Optimus+L7+II-Tutti-21.html
*Prevent getting redirected by lg-phone-firmware.com :-
^Internet Explorer :-
1. Open the Internet Explorer browser and click on the "Tools" menu at the top of the page.
2. Click on "Internet Options," then click the "Security" tab. In the "Security Level for this Zone" box, use the slider to set the security to "High." This stops Internet Explorer from using ActiveX, preventing Web pages from redirecting you to others. Although this stops the redirecting action, legitimate websites may not load properly, or at all. Some functions on websites become disabled, such as links to other websites, video or PDF files.
^Firefox :-
1. Open the Firefox browser and click on the "Tools" menu.
2. Click on "Options," then click on the "Advanced" tab. Navigate to the "Accessibility" box, under the "General" tab.
3. Click the check box next to "Warn me when websites try to redirect or load the page." Click "OK." This option stops a redirect from occurring, and notifies you of the situation. You may then allow or deny the redirect.
TWRP 3.0.0.0 for L7II P715(optional but recommended, I feel its better than cwm) :- http://forum.xda-developers.com/optimus-l3-l5-l7-l9-ii/orig-development/recovery-twrp-3-0-0-0-vee7-l7-ii-t3313792 - by neutrondev
SuperSU v2.66 :- https://download.chainfire.eu/896/SuperSU/ - by chainfire
^Flashing TWRP, SuperSu :-
1. Place TWRP, SuperSU in external sdcard.
2. Boot your Phone into recovery mode by holding volume down+quick button(one on top left) and then holding power button for a few seconds then release all keys when you see LG logo.
3. Select - install .zip from sdcard. (use vol up and vol down to scroll through options on cwm recovery)
4. Select your zip file and confirm.
5. Reboot your Phone.
If this guide helped you, please hit the thanks button.
gud day to all of you... but not gud to me... coz i got a probz wid my p713 it was bricked & i've been tried many times to flash a rom to restore my fon using this method... unfortunately window always poping up & has a message the program stop working properly close the program...) any advises what happened to my program? is it my OS7 or any missing files from my PC that i must be add on.
pls help...
TIA.
sweetandrea said:
gud day to all of you... but not gud to me... coz i got a probz wid my p713 it was bricked & i've been tried many times to flash a rom to restore my fon using this method... unfortunately window always poping up & has a message the program stop working properly close the program...) any advises what happened to my program? is it my OS7 or any missing files from my PC that i must be add on.
pls help...
TIA.
Click to expand...
Click to collapse
Sorry I did not add C++ Runtime Library. First install runtime library then try to run LG Flash Tool.

LG W100 Inaccessible

Battery drained and watch sat for some time. With recharge, watch is stuck on LG start-up screen. Can access the fastboot menu, and watch is in locked mode. Can also enter recovery mode but progress stops there. Can do a factory reset but it takes me back to locked start-up screen. Cannot unlock bootloader or enable ADB debugging as the watch will not boot. Have spent a couple of hours searching forum for direction on how to reset or restore, but with no luck. Watch is all stock and have never tried rooting. Would like to give this watch another go with new rom and mods!
Bootloader version is DORYz12c. Lock state is locked. Secure boot is enabled.
Would appreciate any direction that can be provided!
Hey,
i basically went through the same process a couple of days ago so heres what worked for me:
if you speak german heres a video detailing the process, if not still a handy visual guide probably,
1. install lg drivers
2. install modded version of lg flash tool (credit: ieatacid)
3. connect watch to pc in download mode by swipping from bottom left to top right during lg logo screen
4. in your device manager look for LGE Android Platform USB Modem in the modems section, if present continue if not check step 4a
4a. Under USB-Controller check for LGE Mobile composite USB device and change the driver manually to android modem (update driver, manually, choose from list, Lg)
5. check for LGE Android Platform USB serial port in the ports (COM&LTP) section and change the port to 41 (properties, port properties, advanced, com port ->41)
6. disconnect watch
7. copy LGW100AT-00-V10a-NXS-XX-MAY-27-2014-KKV51-USER+0.tot and LGW100_SVC_LGFLASHv186.dll files into flash tool installation directory
8. open lg flash tool, some error messages are to be expected
9. select manual mode and browse for LGW100_SVC_LGFLASHv186.dll in the DLL section, as well as .tot file for S/W (Add, select LGW100AT-00-V10a-NXS-XX-MAY-27-2014-KKV51-USER+0.tot)
10. select USB connection mode, press ok
11. press the yellow arrow button, top left corner section should display READY!!
12. connect watch in download mode and wait for the process to finish
13. First boot could take a while but watch should boot into wear os 1.0. From there you can enable adb, unlock bootloader, flash custom recovery, root, flash wear os 2.0 or asteroidOS, whatever, using tutorials all available on XDA.
For me the usb cable was a big unexpected hurdle/timewaste, as switching it immediately lead to a succesfull flash so keep that in mind especially if your watch seems to be dis- and reconnecting a lot.
All files and directions provided were collected through various sources some of which i cannot retrace atm but credit has to go to ieatacid for flash tool and rootjunky for fimrware backups. Check his archive for further projects with your watch: http://rootjunkysdl.com/files/?dir=LG G Watch
hope this helps
regards

H915 - Installing Lineage 18.1 (Unlock Bootloader, TWRP, Root Optional)

Hi All,
With the recent launch of LineageOS 18.1 I decided to take the plunge and get it installed on my fully stock Videotron/Freedom H915. Since I had to smash together info from a half dozen other threads, I figured I'd gather it all together here for folks with a Canadian phone trying to make this work.
Since I knew absolutely nothing coming into this, I'm going to go a little more detailed on this write-up. If you've been flashing ROMs since the old days of Cyanogenmod you can probably skim half of this.
Disclaimer : I'm not responsible for any bricked phones or other negative outcomes. This is what worked for me, but I'm far from being an expert. If you continue past this point you agree to take your time, do your reading, be responsible for your own device/actions and not hold me or the forum accountable for anything that might go wrong. You've been warned.
IMPORTANT NOTE #1
If you've picked up an H915 on ebay and you are intending to use it on a network other than the one it's SIM locked on, make sure you do the whole SIM unlock process on the stock ROM either before you get started at all, or once you've reverted to the vulnerable stock ROM after Step 1 below.
I actually use Telus as my provider and I wasted a bunch of time trying to figure out why I couldn't get signal because only the stock ROM will prompt you for a SIM Unlock code. Lineage will just sit there dumbly and not allow you to enable data.
Once you've unlocked the SIM it will stay unlocked from that point forward, just make sure to unlock it and verify your SIM is working with LTE on the stock ROM before you get started.
IMPORTANT NOTE #2
Use LGUP's "DUMP" feature to take a backup of ALL partitions on your phone before you start. If you're reading this thinking "I just bought this phone off ebay, there's nothing on it I care about", take the backup anyway. You never know when you might need a copy of the modem partitions or other things from your phone's original build. It came in super handy for me in troubleshooting the process. So go do a backup!
Current Issues:
If signal is too weak to connect to a tower (or non-existent), the OS tends to crash with a modem error. Still trying to figure this one out.
I think I can get this working without first jumping to US996 but haven't had a chance to verify that. If I do I'll update the thread.
Download Prerequisites
Links working as of 2021-06-29
LGUP with patch
Link
Working adb/fastboot environment
Instructions
Download
Fastboot Drivers
Link
Universal ADB Driver
Link
Videotron/Freedom H915 Android 7 (Nougat) version E - H91510e_00_VTR_CA_OP_1205.kdz
Link
USA General US996 Android 7 (Nougat) version F - US99610f_00_1205.kdz
Link
APK for Terminal Emulator
Link or Alternate Link
LG V20 Root Package Original (v4?)
Link
Old TWRP for Root Package
Link
Videotron/Freedom H915 Modem Partition Image
Link
Lineage Install Zip for H910 (grab the latest, I'm using lineage-18.1-20210506-nightly-h910-signed.zip which is already out of date)
Link
MindTheGapps
Link
(Optional, for rooting) Magisk
Link
Different Boot Modes
For those not familiar with these phones, there are three different "modes" the phone can boot into. Here's a quick reference on how to boot into each one.
Download Mode
This mode is used for pushing KDZ files or individual partition backups using LGUP
Turn Off Phone
Hold the Up-Volume Button
Insert USB-C Cable with other end already plugged into PC
Bootloader (aka Fastboot) Mode
The H915 doesn't come with this mode by default. If you try it, you'll just get battery charging. We'll be temporarily converting the phone to a US996 in order to use the DirtySanta exploit to replace the bootloader partition with a leaked Engineering aboot.
This mode is used with the fastboot tool to load the TWRP utility into the Recovery partition.
Turn Off Phone
Hold the Down-Volume Button
Insert USB-C Cable with other end already plugged into PC
Recovery Mode
The recovery mode on a stock phone is used to perform a factory reset. We will be using the Factory Reset a couple times with the stock ROMs, then replacing the contents of the recovery partition with the TWRP tool that allows us to format partitions, load partition images, and sideload apps and LineageOS itself.
Turn Off Phone
Hold the Down-Volume Button
Press and hold Power-On (rear fingerprint sensor/button). When LG Logo appears, release power button for 1 second then press and hold again
When "Factory Data Reset" appears, release all buttons
Press Volume Down to highlight "Yes" then press power button to select the option
Repeat for the confirmation
Note about flashing KDZ files using LGUP
You can flash KDZ files onto the phone using LGUP from two places - either with the phone in "Download Mode", or with the phone booted into the OS with the USB Options set to "File Transfer" and USB Debugging turned on.
The difference between these two is when it performs the OS compatibility check.
In Download Mode it's the code of the Download Mode partition that does the check. In the OS, it's the OS that does the check before booting to Download Mode and bypassing Download Mode's check.
Why is this important? Because when converting from one phone to another (Say, an H915 to a US996 like we do below), you initially can't flash the KDZ using LGUP's "Upgrade" function. You can only use "Partition DL" to replace the contents of partitions with the contents of the KDZ. This kind of works, but ends up with a phone that will sometimes identify as a H915 (in Download Mode) but sometimes identify as a US996 (in the OS). To clean it up, once you've done the Partition DL method, you can do it again from the OS and use the Upgrade method to get a really clean install.
It works going back the other way as well when you want to return to stock.
If this doesn't make sense, don't worry. You don't need to fully understand it to follow the instructions below, I just found it to be interesting info that didn't seem to appear in other threads.
Process Overview
Revert the phone to an old/vulnerable stock Nougat ROM for Videotron/Freedom Mobile
Enable Dev Options
Dump contents of US996 KDZ partitions over top of existing partitions
Cleanup by re-flashing US996 KDZ partitions over top of existing partitions
Transfer files to the SDCard and install Terminal Emulator
Unlock the Bootloader using the DirtySanta exploit
Boot to old TWRP and install new TWRP
Boot to new TWRP, install LineageOS, Google Apps, and flash modem partition image
Reboot to LineageOS
Actual Process
1 - Revert the phone to an old/vulnerable stock Nougat ROM for Videotron/Freedom Mobile
We need to be on Nougat for this to work, so if you're on Oreo you have to downgrade to Nougat before we begin. I chose a Nougat ROM for the H915 that's vulnerable to the DirtySanta exploit because I know it works and because I'm hoping in the future to be able to skip converting the phone to a US996 if possible.
Boot phone into Download Mode
Launch LGUP with Patch
Select "Upgrade" radio button
Select bin file : H91510e_00_VTR_CA_OP_1205.kdz
Click Start
When finished phone will reboot
1.5 - Do this if Step 1 Failed... Otherwise continue to Step 2
Depending on what's loaded on your phone when you start, it might complain about doing Step 1. This should allow us to bypass the issue and allow Step 1 to work. You can use this step if you've already converted the phone to another model as long as it's not bricked.
Boot phone into download mode
Launch LGIP with Patch
Select "PartitionDL" radio button
Select bin file : H91510e_00_VTR_CA_OP_1205.kdz
Click Start
Click the "Select All" partitions checkbox and click OK. When done it will reboot.
If it hangs or loops on reboot, boot into "Recovery Mode" (which at this point will Factory Reset the OS)
The phone boots into the OS
Quickly go through setup wizard. Skip as many things as possible.
Go Settings - General - About Phone - Software Info - Make sure it identifies as H91510e
Change the USB Option mode to "File Transfer"
Then repeat Step 1, but from inside the OS instead of in Download Mode
2 - Enable Dev Options and File Transfer Mode
We need these enabled after every time we flash the OS so that our LGUP and adb commands will work. You'll get used to doing these steps a bunch.
Quickly go through setup wizard. Skip as many things as possible.
Unplug USB-C cable
Swipe down from the top and change from USB Charging mode to File Transfer mode
Settings - General - About Phone - Software Info
Tap on Build Number many times until it unlocks Developer Mode
Go back 2 menus and enter the new "Developer Options" menus
Make sure "Enable OEM Unlock" is enabled
Enable "USB Debugging" (will be greyed out if USB-C cable is still attached)
Go back to main screen
Plug USB-C cable back in.
A pop-up will appear asking to Allow USB Debugging. Check the "Always Allow" box and tap OK
3 - Dump contents of US996 KDZ partitions over top of existing partition
The Videotron/Freedom KDZ has no Bootloader/Fastboot mode. If you try to enter bootloader mode you'll just end up charging the battery. So we have to cross-flash the US996 KDZ to get a phone with a bootloader which we can then replace with the engineering version using the DirtySanta exploit.
Boot phone into download mode
Launch LGUP with Patch
Select "PartitionDL" radio button
Select bin file : US99610f_00_1205.kdz
Click Start
Click the "Select All" partitions checkbox and click OK
When the phone boots back into the OS, repeat all of Step 2.
Note: If it asks for a password on startup, follow the "Boot to Recovery" steps and since
we don't have anything loaded in the recovery partition it will wipe/erase the phone
and remove the password.
4 - Cleanup by re-flashing US996 KDZ partitions over top of existing partitions
As mentioned in the "Note about flashing KDZ files using LGUP" section above, after you use the PartitionDL method you get a kind of dirty phone image that doesn't always identify as its new model. To clean up, we repeat the process in Upgrade Mode, taking advantage of the fact that at least the OS now identifies as US996 even if Download Mode doesn't. After this, Download Mode will also identify as US996.
Starting booted into the OS with a USB-C cable attached (File Transfer mode, USB Debugging on):
Launch LGUP with Patch
Select "Upgrade" radio button
Select bin file : US99610f_00_1205.kdz
Click Start
When the phone boots back into the OS, repeat all of Step 2.
5 - Transfer files to the SDCard and install Terminal Emulator
We will need some files on the SDCard in the phone in order to install them, either inside the OS (in the case of Terminal Emulator), or later on from TWRP. The Terminal Emulator will be used for the DirtySanta exploit so we need to get that installed now.
Make sure the USB Connection is set to Data Transfer mode and copy the following files to the SDCard:
APK for Terminal Emulator
twrp-3.5.1_9-0-us996.img
h915freedommobilemodem.img
Enable installing apps from unknown sources by:
Settings - General - Fingerprints and Security - Unknown sources (turn it On)
Install Terminal Emulator:
Tools - File Manager
Choose "Allow" when prompted
Click the up-arrow next to "Internal Storage"
Choose SD Card
Scroll down and tap on jackpal.androidterm-1.0.70-71-minAPI4.apk
Install
6 - Unlock the Bootloader using the DirtySanta exploit
The US996 KDZ has a bootloader but it's locked. In order to unlock it we need to use the DirtySanta exploit to give us permissions to replace the Bootloader/Fastboot with a leaked engineering version.
Starting booted into the OS with a USB-C cable attached (File Transfer mode, USB Debugging on):
Settings - General - About Phone - Software Info
Verify that Software Version lists as US99610f
Copy the twrp-3.0.2-1-us996.img file into the folder containing the LG V20 Root Package
Open a command prompt window and change to the folder containing the LG V20 Root Package and run "Step1.bat"
It will push multiple files to the phone and apply some patches/exploits.
This proces will take 5 minutes and put you out at an "elsa:/ $" prompt
At this "elsa:/ $" prompt in your command prompt window type the following:
run-as con
chmod 0777 /storage/emulated/0/*
On the phone, launch Terminal Emulator and run the following:
id
Verify that the string which comes back contains the string "context-u:r:untrusted_app".
If not, run Step1.bat again, else continue forward
Enter the follosing command into Terminal Emulator (be very careful to type it properly):
applypatch /system/bin/atd /storage/emulated/0/dirtysanta
If that command came back with an error, close and re-open Terminal Emulator and try again
The command should begin to patch another file. This will take 5 minutes and will return you to the "elsa:/ $" prompt in Terminal Emulator when it has finished
Open another command prompt to the same folder and run "Step2.bat"
This step will download backup copies of the boot and aboot partitions from the phone then boot the phone into bootloader/fastboot mode.
You'll know it worked if the first line at the top of the phone screen appears in red
In the command prompt window, run Step3.bat
It will flash boot1.img and the TWRP Recovery image multiple times then restart the phone
The phone will hang, no matter how long it's left. Wait 5 minutes (at least until the logo re-loads once) then do the following:
Unplug the USB-C cable
Remove the battery from the phone to turn it off
Replace the battery
Boot into Fastboot mode and run the following commands in your command prompt:
fastboot flash boot bootbackup.img
Remove the USB-C cable and battery to turn off the phone. Then replace the battery and enter Recovery Mode
The phone will show a big red exclamation mark saying "Your device is corrupt". This is normal. It will go away after a few seconds then boot into recovery. This error screen is the result of the engineering "aboot" image that was flashed to give us an unlocked bootloader and will always happen on boot.
7 - Boot to old TWRP and install new TWRP
The old version of TWRP recovery will load. Don't ask me why we can't just go straight to new TWRP above, it didn't work well when I tried it.
If it asks for a password to decrypt data, click Cancel
Swipe to allow modifications
Install - Select Storage - MicroSD Card - OK
Install Image - Scroll down and tap the "twrp-3.5.1_9-0-us996.img"
Select the Recovery partition and swipe to confirm flash
Back to main menu
Reboot - Recovery
8 - Boot to new TWRP, install LineageOS, Google Apps, and flash modem partition image
The new version of TWRP will load:
Check the "Never show this screen during boot again" box
Swipe to allow modifications
Wipe - Format Data - type "yes" to continue
This is likely to fail the first time. Repeat it to properly format the data partition.
Go back to Main Menu - Wipe - Advanced Wipe - Select "Dalvik / ART Cache", "System", and "Cache"
Swipe to wipe
Back to main menu
Advanced - ADB Sideload
Plug in USB-C cable
Swipe to start sideload
In command prompt window on PC type the following:
adb sideload lineage-18.1-20210506-nightly-h910-signed.zip
When complete tap "back" and "ADB Sideload" and swipe again to apply another file:
adb sideload MindTheGapps-11.0.0-arm64-20210412_124247.zip
If you want to root the phone (completely optional, not necessary for this process), now is the time to do it. Tap "back" and "ADB Sideload" and swipe again to apply another file:
adb sideload Magisk-v23.zip
Go back to main menu - Install - Install Image - tap the h915freedommobilemodem.img file
Select the Modem partition and swipe to confirm flash
Remove USB-C cable
9. Reboot to LineageOS
Go back to main menu - Reboot - System - Swipe to reboot
References where I got the info to make this tutorial
Official Lineage 18.1 for LG V20 Release Thread
LineageOS Wiki for H910
DirtySanta Bootloader Unlock and Root Guide (Original)
H910 Rooting Thread (Cross-flash H915 then DirtySanta to US996)
H915 Root, TWRP using DirtySanta [WorkingSignals]
Noob Friendly Root TWRP using DirtySanta
General info about Modem Hardware, Firmware, Radio Interface Layer
[Reserved]
thank you so much. i need it
Great job for writing a complete how-to guide!
Thank You, You saved my old V20 H915​
hi have you been able to find a better modem?
btw i'm not able to decrypt under twrp, can you?
Just want to confirm, it's only guide wich works for me. But I have issues with modem:
1. When I tried to change mode of modem, "prefered network type", phone stayed in the loop of the kernel panic "modem crash"
2. It were difficult to revert changes back. Finally, safe mode (in order to get it, you need to press volume up and volume down in the same time, during LinageOS booting process) helped me - when I disabled airplan mode, I had 2-10 seconds until next kernel panic. And in ~10 attempts, I were able to finally switch modem's mode to GSM/WDCMA/LTE
3. I used this phone 3 days, and once the kernel panic (because of modem) happened again
Any ideas what to do with modem? Also, the picture "Your phone is corrupt" is not fan Any ideas how to change it?
I did my best to follow all the instructions but after step 7's reboot I just get blocks full of static. I can tell it's trying to do fresh install setup though from what's peeking through the blocks.
Riot54 said:
I did my best to follow all the instructions but after step 7's reboot I just get blocks full of static. I can tell it's trying to do fresh install setup though from what's peeking through the blocks.
Click to expand...
Click to collapse
This is normal. Flash a kernel that's patched for dirty santa OR, cover the proximity sensor on boot and keep it covered until boot is complete.
That worked, thanks.
After multiple attempts going back and forth with step 6, I finally did it! I might switch to Lighthouse or Arros but I wouldn't have gotten this far without your guide.

Categories

Resources