Related
First of all, I have to officially thank user kalunlee for his help in this. He pulled the files from the chinese forums, and in there you have to either register or pay for the links. Without his help there would be no guide.
XDA is open for everyone, on those Chinese forums they keep their resources well hidden, but they don't bother thanking the people here on XDA for their work (rooting tools maybe?), and they even get credits for the tools taken from here! --rant over--
Let's start now. This guide is for all user of D857 or D858 wanting the Google Apps on their phones without messing around with rooting and custom recoveries, but want to keep the phone in a stock condition. Model D858HK is the only Dual Sim officially supporting the GApps, the goal of this guide is transforming a D857/D858 into an HK model.
Istructions:
Enable USB debugging on your device: menu > settings > developer options.
Install Stump Root and root the phone. Install SuperSU immediately after reboot and run it.
Install Build Prop Editor apk (I used Build Prop Editor from joeykrim, the other one didn't work), edit ro.product.model=LG-D857 to ro.product.model=LG-D858HK.
Install LG Driver.
Install LGFlashTool, overwrite the megalock.dll with the provided one.
Turn off phone, hold the volume up key and plug into the computer (DOWNLOAD MODE).
Let the LG driver install for your phone.
Go to device manager in Windows Control Panel, change LGE Mobile USB Serial Port to com41
Open LGFlashTool select the right TOT file and dll (use BOARD DL)
Go to Port settings set LIMO Port to COM101 tick port 1 only on the right (Basically first 3 items ticked)
Click Start
Remove the cable for 5 seconds and reconnect, the flash will start
Flash
Done
Now you have a D858HK instead of D857.
If you get a port error at the starting of the flash disconnect the phone, remove LG drivers, reinstall them again, change the port to com41, and without rebooting launch again the flashtool.
If you get a Windows error, remove any antivirus you have!!
If at the end of the flashing procedure the phone boots into the miniOS, then pull out the battery and enter into the recovery and do a factory reset. Reboot. When in miniOS again, press the power button and tap on normal boot!
Links:
ALL-IN-ONE TRANSFORMATION PACKAGE (thanks to ikol-77):
https://drive.google.com/folderview?id=0Bxv0rM0SdxuFbnpWUTFyaFVqVGc&usp=sharing
TOT File (D858HK v10d)
http://pan.baidu.com/share/init?shareid=1792523609&uk=2841005147&third=15
password 3uwc
Alternate link (magnet): magnet:?xt=urn:btih:8643A5C8F6F5B12...nce&tr=udp://tracker.publicbt.com:80/announce
DLL
https://mega.co.nz/#!VEhTzJxQ!v44-bnc1zhapsTDvT8UZOaiyMmKGBqg2FL9PKjrwPPc
password g6qa
Alternate Link with Blindfolded XML for Flashtool (magnet): magnet:?xt=urn:btih:6D5F4E34FF96E10...=udp://tracker.openbittorrent.com:80/announce
Build Prop Editor v1.17
https://mega.co.nz/#!MF5xnYIQ!vyvNmlhYQBfy7MpfZ27C8wiPQKe6JY4U7AfPOUNny4U
LG Driver v3.12.3
https://mega.co.nz/#!0IpVzb4I!lgvQsTAmKD-1J3yV-WRqWfJLuiVwhwuL0q3ObNjSEK0
LG FlashTool v1.8.6.527
https://mega.co.nz/#!VBJh0bQa!0Tx15V0sfxd98mYpFxsp-h8RPDVhMCeQ6e0nNc6M9YY
Alternate Link (magnet): magnet:?xt=urn:btih:2037B01DADF1D36...nce&tr=udp://tracker.publicbt.com:80/announce
Stump Root v1.2.0
https://mega.co.nz/#!QRpQEKQI!UYXXJiJK3Ql-nO9ecyM6YdQJwtz_Px1-sYezZ9wGLs0
SuperSU v2.14
https://mega.co.nz/#!wFAGhYqA!T2gxEyS8CuTsibtrUX9YsEKTJZaXYUAkq1dQM2628YM
IMPORTANT: For those of you with not working links or different issues during the procedure, please have a look at the findings of reb00tz (again, thanks buddy!):
http://forum.xda-developers.com/showpost.php?p=56542760&postcount=80
For those of you needing to root, here is my guide, just follow it without installing the GApps, it's useless now!
http://forum.xda-developers.com/showpost.php?p=55587140&postcount=2
Yes, after transforming the phone into a D858HK, you'll be able to install any OTA update that will be pushed to you. It's not like the G2, no more OTAs after this guide, you will have to manually install the update.
DO NOT INSTALL v10c on the D857, it's impossible to root at the moment. If you do, the only way to go is the downgrade. I will set up a new guide soon if I'll be able to do that on mine (learn the hard way :crying: ) Look for D857v10a TOT. Downgrade to v10a, root, then follow this guide to transform to a D858HK.
Will edit with more detailed instructions soon. STAY TUNED!
--------D858HK v10f--------
Edit: Thanks to member biu40288 on gfan, here is the newest v10f D858HK:
http://pan.baidu.com/s/1o6kIAFo
Password: fx5e
Alternate Link (magnet): magnet:?xt=urn:btih:D0B7D6F43FDC136...=udp://tracker.openbittorrent.com:80/announce
WARNING: v10f no root! None of the root methods work (PurpleDrake, IoRoot, StumpRoot, Tow3lRoot)!
If you need to go back to v10a of D857, here are the links thanks to ikol-77:
v10a TOT:
https://mega.co.nz/#!plghkBKB!LgO_qOhVoyfM27kYkjeormM9kS3YnlbkYd4M_6unVUU
Password: lgbbs
LOLLIPOP D858HK v20d: http://csmgdl.lgmobile.com/dn/downloader.dev?fileKey=FW1D8X8F22TWAAB9BD3F765/D858HK20d_00.kdz
Video-Guide for flashing the LG G3:
http://lgg3root.com/lg-g3-root/how-to-unrootunbrick-lg-g3/
Thanks a lot for this great information.
However, MEGA asks for an decryption key ... can't download atm.
A doppo
The question is: can we do this for all variants? Like vs985/D851 to D855
Sent from my VS985 4G using XDA Free mobile app
I just flashed mine, everything seems OK, just at the end LG Flash Tool showed "Waiting for reset 120 sec", phone restarted and setup screen showed up.
Then LG Flash Tool showed error message "download failed" and "USB port open fail", but phone works well. Any idea why this happened?
Don't try to flash other LG G3 to this version. It only works for D857 or D858 to D858HK. These are the dual sim version and all have the same hardware.
Not sure what happened to the links but you can try the links in the original post
http://forum.xda-developers.com/lg-g3/help/d857-gapps-t2882412/page3
You can ignore the fail message at the end, it happened to one of the phones that I flashed too.
DomFel said:
Yes, after transforming the phone into a D858HK, you'll be able to install any OTA update that will be pushed to you.
Click to expand...
Click to collapse
That's not actually accurate. OTA on D858HK are IMEI based, so even the D857 (or mainland D858) is flashed into D858HK, it won't receive any OTA notification still,as your IMEI will be designated to D857.
I'm not exactly sure if there s any way to side load the OTA without root/flash Tot, I hope someone will find a way when new OTA files are available for this.
kingcedz said:
That's not actually accurate. OTA on D858HK are IMEI based, so even the D857 (or mainland D858) is flashed into D858HK, it won't receive any OTA notification still,as your IMEI will be designated to D857.
I'm not exactly sure if there s any way to side load the OTA without root/flash Tot, I hope someone will find a way when new OTA files are available for this.
Click to expand...
Click to collapse
You're partially correct. OTAs are theoretically IMEI based, but it has to match the installed firmware and firmware keys of the device, in this case you'll have 858HK keys, thus 858HK OTA.
On the G2 I changed firmware successfully twice to change the region (thus enabling few needed LTE bands), and it got two OTAs for that region, not for the original one.
Time will tell BTW!
Hi ! you mean by firmware installed 4G frequencies can change?
freejess said:
Hi ! you mean by firmware installed 4G frequencies can change?
Click to expand...
Click to collapse
That's what happened with the G2. Couldn't get 4G in the UAE with Open EUR firmware. Switched to UAE firmware and got LTE!
Ah! This is great news. Maybe I'll get one of Australia will have plenty of 800mhz LTE as I was certifed seller ...
freejess said:
Ah! This is great news. Maybe I'll get one of Australia will have plenty of 800mhz LTE as I was certifed seller ...
Click to expand...
Click to collapse
Be careful, you can't flash a D855 firmware into a D857/858/859 phone! You'll brick it!!
DomFel said:
Be careful, you can't flash a D855 firmware into a D857/858/859 phone! You'll brick it!!
Click to expand...
Click to collapse
Hi there. Hoping you or maybe others from this thread could help me.. working on this document to list which root methods work on each device.
We do not get much input/feedback from D857/8/9 users and it would be nice to know if anyone could help me fill in the blanks for those devices.
Does D857/8/9 work with ioroot? if so which software versions? (10A? 10B? for example..)
Does D857/8/9 work with towelroot? if so which software versions?
Does D857/8/9 work with purpledrake root? if so which software versions?
Does D857/8/9 work with stump root? if so which software versions?
And I see you have mentioned that D855 firmware will brick a D857/8/9? Is this confirmed? It cannot be fixed if someone does this?
Do D857/8/9 users have a working TWRP from BUMP! yet? Im curious if the D855 version of TWRP would work for you
D857/8/9 users.. please keep me posted so we can make sure you dont get left out
autoprime said:
Hi there. Hoping you or maybe others from this thread could help me.. working on this document to list which root methods work on each device.
We do not get much input/feedback from D857/8/9 users and it would be nice to know if anyone could help me fill in the blanks for those devices.
Does D857/8/9 work with ioroot? if so which software versions? (10A? 10B? for example..)
Does D857/8/9 work with towelroot? if so which software versions?
Does D857/8/9 work with purpledrake root? if so which software versions?
Does D857/8/9 work with stump root? if so which software versions?
And I see you have mentioned that D855 firmware will brick a D857/8/9? Is this confirmed? It cannot be fixed if someone does this?
Do D857/8/9 users have a working TWRP from BUMP! yet? Im curious if the D855 version of TWRP would work for you
D857/8/9 users.. please keep me posted so we can make sure you dont get left out
Click to expand...
Click to collapse
D857 works with Stumproot with version v10a and v10b only. v10c fixed the vulnerability.
D857 doesn't work with towelroot (tested v10b and v10c).
D857 doesn't work at all, it says -unsupported-.
D857 doesn't work with ioroot (tested v10b and v10c).
D857 will be bricked by flashing D855 firmware. Probably a recovery would be possibile accessing the firmware download mode, but I am not brave (stupid) enough to do it, since D855 doesn't support dual sim mode.
TWRP doesn't work on D857, after a reboot the recovery won't be accessible anymore, it will only work once. Be careful, when installing a custom recovery the original one will be gone forever, unless you restore with LG Support Tool. TWRP doesn't fully support D857, thus it probably installs the recovery on wrong memory addresses, and it is not bootable for a second or third time, but only once.
The only way to access the custom recovery is to install it again.
Personally I had to downgrade from v10c to v10b to be able to root and change firmware to D858HK in order to have GApps natively. v10c on D857 is unrootable.
The difference between D857/8/9 is customization: D857 is the international version, /8 and /9 are for China Mobile and Statecom. D858HK is the Hong Kong international version of the G3 Dual Sim that includes the GApps, all other firmware don't, since they are for the chinese market, which Google abandoned.
Haven't personally tested Stumproot on D858HK v10d yet.
DomFel said:
D857 works with Stumproot with version v10a and v10b only. v10c fixed the vulnerability.
D857 doesn't work with towelroot (tested v10b and v10c).
D857 doesn't work at all, it says -unsupported-.
D857 doesn't work with ioroot (tested v10b and v10c).
D857 will be bricked by flashing D855 firmware. Probably a recovery would be possibile accessing the firmware download mode, but I am not brave (stupid) enough to do it, since D855 doesn't support dual sim mode.
TWRP doesn't work on D857, after a reboot the recovery won't be accessible anymore, it will only work once. Be careful, when installing a custom recovery the original one will be gone forever, unless you restore with LG Support Tool. TWRP doesn't fully support D857, thus it probably installs the recovery on wrong memory addresses, and it is not bootable for a second or third time, but only once.
The only way to access the custom recovery is to install it again.
Personally I had to downgrade from v10c to v10b to be able to root and change firmware to D858HK in order to have GApps natively. v10c on D857 is unrootable.
The difference between D857/8/9 is customization: D857 is the international version, /8 and /9 are for China Mobile and Statecom. D858HK is the Hong Kong international version of the G3 Dual Sim that includes the GApps, all other firmware don't, since they are for the chinese market, which Google abandoned.
Haven't personally tested Stumproot on D858HK v10d yet.
Click to expand...
Click to collapse
thank you for your response.
are you 100% sure PurpleDrake doesn't work? D855 10L has patched Stump but no one has patched PurpleDrake yet... unless it never worked to begin with.
does the following command work for you?
Code:
adb reboot --bnr_recovery
and did u try the purpledrake at this thread? because there are 2.. one is for D851 only.. this one is for all - http://forum.xda-developers.com/lg-g3/development/root-root-lg-g3-easily-purpledrake-lite-t2821000
check the manual commands in the first post if the script does not work. I want to confirm and be 110% sure purpledrake does not work on the D857/8/9.. that would make the D857/8/9 the ONLY g3 that does not have root yet.
also.. you mentioned D857 for ioroot/towelroot/purpledrake.. etc... what about the D858 and D858HK and D859? same results for all phones? or only for D857?
and for TWRP.. did you use the fastboot twrp method? do not use fastboot boot method. or did you try the Bump twrp? u tried the twrp-2.8.0.0_d855-signed.img file here? http://forum.xda-developers.com/lg-...mp-unlock-lg-g3-twrp-d852-d852g-f400-t2900614
http://downloads.codefi.re/thecubed/lg_g3/bump/twrp-2.8.0.0_d855-signed.img
Code:
[SIZE="1"]adb push twrp-2.8.0.0_d855-signed.img /sdcard/
adb shell
su
dd if=/dev/zero of=/dev/block/platform/msm_sdcc.1/by-name/recovery
dd if=/sdcard/twrp-2.8.0.0_d855-signed.img of=/dev/block/platform/msm_sdcc.1/by-name/recovery
reboot recovery[/SIZE]
that does not work? if that does not work I will make a proper TWRP for D857 D858 and D859 devices. I will need a boot.img from D858HK if possible please.
and can any D857, D858 or D859 users PM/Message me their IMEIso that I can use LG's website to look up KDZ files and download them myself.
If you want.. you can change or leave off the last 3 digits of the IMEI so that I dont know your exact IMEI for security.
autoprime said:
thank you for your response.
are you 100% sure PurpleDrake doesn't work? D855 10L has patched Stump but no one has patched PurpleDrake yet... unless it never worked to begin with.
does the following command work for you?
Code:
adb reboot --bnr_recovery
and did u try the purpledrake at this thread? because there are 2.. one is for D851 only.. this one is for all - http://forum.xda-developers.com/lg-g3/development/root-root-lg-g3-easily-purpledrake-lite-t2821000
check the manual commands in the first post if the script does not work. I want to confirm and be 110% sure purpledrake does not work on the D857/8/9.. that would make the D857/8/9 the ONLY g3 that does not have root yet.
also.. you mentioned D857 for ioroot/towelroot/purpledrake.. etc... what about the D858 and D858HK and D859? same results for all phones? or only for D857?
and for TWRP.. did you use the fastboot twrp method? do not use fastboot boot method. or did you try the Bump twrp? u tried the twrp-2.8.0.0_d855-signed.img file here? http://forum.xda-developers.com/lg-...mp-unlock-lg-g3-twrp-d852-d852g-f400-t2900614
http://downloads.codefi.re/thecubed/lg_g3/bump/twrp-2.8.0.0_d855-signed.img
Code:
[SIZE="1"]adb push twrp-2.8.0.0_d855-signed.img /sdcard/
adb shell
su
dd if=/dev/zero of=/dev/block/platform/msm_sdcc.1/by-name/recovery
dd if=/sdcard/twrp-2.8.0.0_d855-signed.img of=/dev/block/platform/msm_sdcc.1/by-name/recovery
reboot recovery[/SIZE]
that does not work? if that does not work I will make a proper TWRP for D857 D858 and D859 devices. I will need a boot.img from D858HK if possible please.
and can any D857, D858 or D859 users PM/Message me their IMEIso that I can use LG's website to look up KDZ files and download them myself.
If you want.. you can change or leave off the last 3 digits of the IMEI so that I dont know your exact IMEI for security.
Click to expand...
Click to collapse
Unfortunately that command didn't work on D857 v10c, and the .bat gave unsupported model. Trust me I tried everything to root before I downgraded, I was desperate to gain root on v10c!!
This is the link for v10c for D857:
http://csmgdl.lgmobile.com/dn/downloader.dev?fileKey=FW040906432109876543213/D85710c_00.kdz
Unfortunately I couldn't find any other kdz (I got that link from my IMEI). The dual sims are mainly for the Chinese market, and they don't share any kdz on the Chinese forums, because many of them ask for money for the download of TOT files.
Please send me the instructions to extract the boot.IMG! I will also re-post the link on Mega later on for the 858HK tot file.
DomFel said:
Unfortunately that command didn't work on D857 v10c, and the .bat gave unsupported model. Trust me I tried everything to root before I downgraded, I was desperate to gain root on v10c!!
This is the link for v10c for D857:
http://csmgdl.lgmobile.com/dn/downloader.dev?fileKey=FW040906432109876543213/D85710c_00.kdz
Unfortunately I couldn't find any other kdz (I got that link from my IMEI). The dual sims are mainly for the Chinese market, and they don't share any kdz on the Chinese forums, because many of them ask for money for the download of TOT files.
Please send me the instructions to extract the boot.IMG! I will also re-post the link on Mega later on for the 858HK tot file.
Click to expand...
Click to collapse
ok.
which firmware are you running now? D857? 10c? rooted?
you need root.. and then you would do these commands... then upload the boot.img to me.
so I guess you need to be on 10B and use stump to root.
Code:
adb shell
su
dd if=/dev/block/platform/msm_sdcc.1/by-name/boot of=/sdcard/boot.img
exit
exit
adb pull /sdcard/boot.img
the above commands will open adb shell, gain root, backup your boot.img to internal sdcard, exit rooted adb shell, exit adb shell, pull boot.img off internal sdcard into the folder on your computer where you are running adb.
OR
if you do not want to root the phone but still pull the files.. see my thread here: http://forum.xda-developers.com/lg-g3/development/psa-stop-taking-ota-updates-update-t2909412
under the "Download Updates" section are steps for how to extract KDZ. you can extract boot.img from kdz that way.
the only way to have a rooted D857 10C would be to have 10B.. root it with stump.. install TWRP (D857/8/9 version I need to make).. then update to 10C manually by flashing the system.img, boot.img and modem.img in TWRP.
I have an easy method to flash the system/boot/modem images in my thread as well: http://forum.xda-developers.com/lg-g3/development/psa-stop-taking-ota-updates-update-t2909412
under the "Manual Updating" section I have some flashable "Flash2" zips that do all the work for you once you have the system/boot/modem images on your internal sdcard. no need to make new flashable zips.
If anyone has the boot.img for D858 or D858HK that would be good too.
DomFel said:
You're partially correct. OTAs are theoretically IMEI based, but it has to match the installed firmware and firmware keys of the device, in this case you'll have 858HK keys, thus 858HK OTA.
On the G2 I changed firmware successfully twice to change the region (thus enabling few needed LTE bands), and it got two OTAs for that region, not for the original one.
Time will tell BTW!
Click to expand...
Click to collapse
FYI, I had it flashed with 10C and it didn't receive OTA to 10D, had to do a manual refresh of the whole 10D tot.
I've seen Chinese users reporting the same as well.
That's why i m convinced conversion this way won't receive OTA.
In any case, i have both the D857 converted D858HK, and the local stock D858HK, will be able to verify that once new OTA is pushed out.
all else apart, it's the best version of the android phone by a country mile.
kingcedz said:
FYI, I had it flashed with 10C and it didn't receive OTA to 10D, had to do a manual refresh of the whole 10D tot.
I've seen Chinese users reporting the same as well.
That's why i m convinced conversion this way won't receive OTA.
In any case, i have both the D857 converted D858HK, and the local stock D858HK, will be able to verify that once new OTA is pushed out.
all else apart, it's the best version of the android phone by a country mile.
Click to expand...
Click to collapse
I think you are right. Today I flashed a D855 of a friend of mine in order to change the region. Unfortunately the region didn't change, even by using a TOT file. Under software version it's still AME region and not EUR. Editing the build.prop and reflashing/restoring didn't work neither.
I think LG has hardcoded the region in the hardware, not on the software side anymore!
Hi all,
I'm a user of D858hk, recently i have updated my device through LGMobile Support to D858hk v10f, and the stump root effect is waived...
I try to reroot through stump / purpledrake / towelroot , but eventually can't be success.
Hence, I try to flash the stock d858hk v10d rom here, i have several questions suffer during the thread here.
1. Do i need to modify the build.prop file as my device is D858hk
2. I can't get the dll file from the above links
TOT File and DLL: http://pan.baidu.com/share/init?shar...05147&third=15
DLL http://pan.baidu.com/share/init?shar...05147&third=15
Both links contain a zip file which only include a .tot file inside.
3. I have followed all the steps as stated above, but during "Click Start->Remove the cable for 5 seconds and reconnect, the flash will start-> it show error message "Download Fail - Can't change to download mode", i'm sure i have done "Turn off phone, hold the volume up key and plug into the computer (DOWNLOAD MODE)."
Hope anyone can help and suggest what mistake i have made.
thanks.
Does anyone have a D858HK recovery file? I've accidentally written it with the wrong recovery img (D855's) and when I try to boot recovery it goes to fastboot mode... but on normal operation there aren't any side effects yet.
Greatly appreciate it if any of you can post the recovery's img!
---------- Post added at 02:24 PM ---------- Previous post was at 02:16 PM ----------
cmko said:
Hi all,
I'm a user of D858hk, recently i have updated my device through LGMobile Support to D858hk v10f, and the stump root effect is waived...
I try to reroot through stump / purpledrake / towelroot , but eventually can't be success.
Hence, I try to flash the stock d858hk v10d rom here, i have several questions suffer during the thread here.
1. Do i need to modify the build.prop file as my device is D858hk
2. I can't get the dll file from the above links
TOT File and DLL: http://pan.baidu.com/share/init?shar...05147&third=15
DLL http://pan.baidu.com/share/init?shar...05147&third=15
Both links contain a zip file which only include a .tot file inside.
3. I have followed all the steps as stated above, but during "Click Start->Remove the cable for 5 seconds and reconnect, the flash will start-> it show error message "Download Fail - Can't change to download mode", i'm sure i have done "Turn off phone, hold the volume up key and plug into the computer (DOWNLOAD MODE)."
Hope anyone can help and suggest what mistake i have made.
thanks.
Click to expand...
Click to collapse
1) no, as your device is already D858HK, no need.
2) Here's a link for you to obtain the DLL: https://mega.co.nz/#!YNx2DCSZ!ok0oaK5o7Xu0QeorfnH5gfkEDra9RyoFfhnCkXXIJNE
3) try it after using the right DLL file.
I havent rooted a phone since the galaxy s3 so i'm completely lost, I followed the steps for dirtysanta, but since it never booted into fastboot, I did a little more research and realized that it only works for Dec 2016 security patches and under
So is there anyway to root this thing, ****ing is like ALWAYS hot, I force stop apps and the battery just gets drained quick as hell, my iphone 6s plus kicks this things ass right now
Unfortunately not right now
What model?
-- Brian
You need to downgrade to firmware version before 31 december. You can do that with LGup tool just follow procedures
runningnak3d said:
What model?
-- Brian
Click to expand...
Click to collapse
997
Theres no way to root cause theres no kdzs avaible and all ls997 devs are gone
The LS997, F800L, H910, H915 all have the same RSA key in QFPROM. So, if you are still on ARB 0, then grab an old F800L (that will probably give you the least grief) KDZ, and flash it, after backing up your phone (using the DUMP option from the patched LG UP) of course -- you will need that backup to fix your phone.
If you are still on ARB 0, then your phone is rootable. If you are on ARB 1 or greater, then your phone is not rootable, and probably will only be rootable if a kernel exploit is found since you can't unlock your boot loader.
-- Brian
runningnak3d said:
The LS997, F800L, H910, H915 all have the same RSA key in QFPROM. So, if you are still on ARB 0, then grab an old F800L (that will probably give you the least grief) KDZ, and flash it, after backing up your phone (using the DUMP option from the patched LG UP) of course -- you will need that backup to fix your phone.
If you are still on ARB 0, then your phone is rootable. If you are on ARB 1 or greater, then your phone is not rootable, and probably will only be rootable if a kernel exploit is found since you can't unlock your boot loader.
-- Brian
Click to expand...
Click to collapse
Is this for real? And how do I find my ARB?
runningnak3d said:
The LS997, F800L, H910, H915 all have the same RSA key in QFPROM. So, if you are still on ARB 0, then grab an old F800L (that will probably give you the least grief) KDZ, and flash it, after backing up your phone (using the DUMP option from the patched LG UP) of course -- you will need that backup to fix your phone.
If you are still on ARB 0, then your phone is rootable. If you are on ARB 1 or greater, then your phone is not rootable, and probably will only be rootable if a kernel exploit is found since you can't unlock your boot loader.
-- Brian
Click to expand...
Click to collapse
How can I find my arb?
Hoping someone with a rooted Ls997 is willing to help the current rooting effort.
If you are please check out this thread
https://forum.xda-developers.com/v20/help/want-help-rooting-security-patches-t3680397
Thanks
To try an alleviate any fears, there is a near zero percent chance that anything bad will happen to your phone. I say near zero, because things can always go wrong.
With that said, there are only a couple of ways to brick a V20:
* Flash firmware with a lower ARB version than what is burned into your QFPROM
* Flash firmware with a different RSA key than what is burned into your QFPROM
* Wipe your XBL or ABOOT partitions
* Wipe RECOVERY, LAF *AND* SYSTEM all at the same time.
As long as you have a working XBL, ABOOT and RECOVERY you can recover your phone.
What I need is someone with a rooted LS997 that is willing to flash firmware from a model that has a KDZ. I haven't checked yet, but as soon as someone can get me the XBL from the LS997, and I can compare it to the VS995. They seem to be the closest in specs, and have the greatest chance of actually booting -- and that is all we need is for the phone to boot so that it can be rooted. Once rooted, we will put the LS997 firmware back on the phone.
This is the same procedure that I did for rooting the H910 with an H915 KDZ. As far as I know, all LS997s are ARB 0, so even the latest firmware should be rootable if we can find a model's firmware that will boot.
EDIT: ZVA firmware is ARB 1 so you need ZV9 or older.
-- Brian
We just need one. You don't even need to be a "brave" person. Anyone? Tap tap tap........is this mic on????
Please?
Is this post still going on... Also my Sprint LS997 isn't at VZA anymore, its at VZB. Im not sure if that means anything.
Any updates for zva and zvb .....
runningnak3d said:
To try an alleviate any fears, there is a near zero percent chance that anything bad will happen to your phone. I say near zero, because things can always go wrong.
With that said, there are only a couple of ways to brick a V20:
* Flash firmware with a lower ARB version than what is burned into your QFPROM
* Flash firmware with a different RSA key than what is burned into your QFPROM
* Wipe your XBL or ABOOT partitions
* Wipe RECOVERY, LAF *AND* SYSTEM all at the same time.
As long as you have a working XBL, ABOOT and RECOVERY you can recover your phone.
What I need is someone with a rooted LS997 that is willing to flash firmware from a model that has a KDZ. I haven't checked yet, but as soon as someone can get me the XBL from the LS997, and I can compare it to the VS995. They seem to be the closest in specs, and have the greatest chance of actually booting -- and that is all we need is for the phone to boot so that it can be rooted. Once rooted, we will put the LS997 firmware back on the phone.
This is the same procedure that I did for rooting the H910 with an H915 KDZ. As far as I know, all LS997s are ARB 0, so even the latest firmware should be rootable if we can find a model's firmware that will boot.
EDIT: ZVA firmware is ARB 1 so you need ZV9 or older.
-- Brian
Click to expand...
Click to collapse
Hello bro! Appreciate your efforts! Any updates regarding possibility to root ls997 with ARB>0
I'm still using my LG V20 and I really love it and not planning to switch to another phone anytime soon :'(
Yes. If your arb is 0 you can root. There is a thread about it. Sorry don't have link.
https://forum.xda-developers.com/v20/how-to/root-ls997-to-zv9-t3696488
Sorry miss read your post. You said greater then 0. Look for a post that about. LAF. That's where all the action is
Been looking around for a while, can we root the H918 10T? Only method right now that I can see is magisk and the Lafsploit, and i dont have a 10T boot.img for that. can we use a 10i boot.img or..?
My bootloader is unlocked, i was going down the path for roothing through Recowvery (https://forum.xda-developers.com/v20/development/h918-recowvery-unlock-v20-root-shell-t3490594) to get TWRP on it, but it seems like recowvery doesnt work for 10t.
My end goal is to just get lineageos on this.
EDIT:
Just ended up rooting with this guide. Follow everything to the letter and dont be intimidated, the guide couldnt have been easier:
https://forum.xda-developers.com/v20/how-to/root-lafsploit-h918-version-t3773443
You do not need any boot.img, just simply downgrade to 10p using a 10p kdz flashed through lgup. DO NOT attempt to flash a 10i boot.img as IIRC 10i is ARB00 and you are on ARB01 and that would leave you with a fancy paperweight. Simply read the lafsploit guide a couple times thoroughly and carefully follow it exactly and by the end of it you will have a rooted H918. I followed it and its been working flawlessly and LOS 15 and the gamma kernel make this V20 perform like crazy.
Good luck.
droidrzr1610 said:
You do not need any boot.img, just simply downgrade to 10p using a 10p kdz flashed through lgup. DO NOT attempt to flash a 10i boot.img as IIRC 10i is ARB00 and you are on ARB01 and that would leave you with a fancy paperweight. Simply read the lafsploit guide a couple times thoroughly and carefully follow it exactly and by the end of it you will have a rooted H918. I followed it and its been working flawlessly and LOS 15 and the gamma kernel make this V20 perform like crazy.
Good luck.
Click to expand...
Click to collapse
Yeah i read through it fully, at first sight it was a little overwhelming but its nothing more than a couple command line functions.
When i initially tried to roll back, i got hit with an anti-rollback through LGUP. Do i need to specifically do a 10p rollback? I did try 10j first last night, and it didnt allow me. thank god i guess. If the rollback to 10p goes through cant i just root through recowvery?
Also, do I need to root to flash new ROMs? I'm not sure how arduino is built, or any other systems for that matter. Does the ROM exist above the root directories (kind of like project treble?) or does the ROM include the root directories, so you can just wipe the whole thing and be done with it?
Ohitstarik said:
Yeah i read through it fully, at first sight it was a little overwhelming but its nothing more than a couple command line functions.
When i initially tried to roll back, i got hit with an anti-rollback through LGUP. Do i need to specifically do a 10p rollback? I did try 10j first last night, and it didnt allow me. thank god i guess. If the rollback to 10p goes through cant i just root through recowvery?
Also, do I need to root to flash new ROMs? I'm not sure how arduino is built, or any other systems for that matter. Does the ROM exist above the root directories (kind of like project treble?) or does the ROM include the root directories, so you can just wipe the whole thing and be done with it?
Click to expand...
Click to collapse
You got hit by ARB because you're attempting to downgrade from ARB01 (10T) to ARB00. Lgup won't allow that. The guide requires you to specifically downgrade to 10P, that is still ARB01 so it will downgrade and then you can proceed with the guide.
Good day!
I have a V20 Sprint right after DirtySanta. I want rooted Oreo, I live in Europe (sorry for my English) and use a local telecom operator (CDMA2000 1xEV-DO). There are many incomprehensible I did not find it on the forum.
1) Updating which firmware components increases ARB? I.e. aboot, modem etc.
2) How, having an img file or a kdz file, can I find out the ARB version?
3) Does ARB increase when flashing with any of these methods: "partition dl", "fastboot flash", kdzwriter?
4) Can someone share a Sprint V20 Oreo MODEM and SYSTEM dump?
5) Did someone try to cut the leads on motherboard @runningnak3d https://forum.xda-developers.com/t/...t-to-brick-your-phone-for-funsies-v1.3673622/ ?
6) It seems to me that the best option is to use SYSTEM (and MODEM?) from US99620f (US99620f_00_1120.kdz) . Both LS997 and US996 support CDMA2000 1xEV-DO frequency. US996 contains no bloatware. Does only vs995, us996 and ls997 support СDMA and they all have ARB 1 on Oreo?
7) How best to try:
a) Flash (Installing KDZ US996 7.0 via patched LGUP "partition dl" -> Re-installing the same KDZ via "update") LS997 7.0 to US996 7.0; then flash SYSTEM.img US996 8.0 (+ core mk2000 Oreo US996)? If there is no connection, flash MODEM.img US996 8.0?
Or
b) The same without prior full flashing to US996. Which kernel @askermk2000 and TWRP @Phoenix591 in the case of such a "Frankenstein" to use - LS or US? Which kernel is better to use in this case: LS997_v2.1, US996Santa_v2.2 or US996Santa_v2.2-BETA38? Would it make sense to flash the LS997 8.0 modem?
8) What is the best way to flash the SYSTEM and MODEM? kdzwriter, LGUP "dl partition", "fasboot flash"?
Thank you guys for your work and time!
An LS997 on Oreo is on ARB1 and therefore completely locked down and unrootable, so I don't think anyone has made any dumps from it. No idea which specific portion causes the ARB to change.
I would not recommend cross-flashing a modem unless someone else reported it to be working. You have a much higher risk of completely losing all cellular signal. Does your phone in its current state have signal reception problems?
The rootable LS997 on ARB0 is generally assumed to be stuck on Nougat for stock-based ROMs, and I haven't seen anyone try to flash any stock US996 Oreo parts, so that could be quite risky. If you really want Oreo or higher, then you should consider looking at the LineageOS-type ROMs.
For more things on the LS997, I've written up a bunch of general information in this post on the V20 Subreddit.
how to check ARB status?
nevermind, i got it back how do i confirm ARB?
xxTECRAxx said:
how to check ARB status?
nevermind, i got it back how do i confirm ARB?
Click to expand...
Click to collapse
As far as I know, only the H918 (software version H91810p or later, includes all on Oreo) and LS997 (software version LS997ZV8 or later, includes all on Oreo) have ARB enabled. So you don't have to worry about it on any other model, including the US996. Or did you actually cross-flash the US996 Oreo KDZ onto the LS997?
C D said:
As far as I know, only the H918 (software version H91810p or later, includes all on Oreo) and LS997 (software version LS997ZV8 or later, includes all on Oreo) have ARB enabled. So you don't have to worry about it on any other model, including the US996. Or did you actually cross-flash the US996 Oreo KDZ onto the LS997?
Click to expand...
Click to collapse
I did cross flash my LS997 with US996 10f kdz
xxTECRAxx said:
I did cross flash my LS997 with US996 10f kdz
Click to expand...
Click to collapse
Is it 10f or 20f (your screenshots show 20f)? It's certainly interesting to see US996 stock Oreo cross-flashed onto an old LS997 as I have never seen anyone do it before. Do things actually function normally on it?
Anyway, everything's still on ARB0, so you can downgrade any way you like. If you haven't already done so, you'll need to be on 10f in order to do the rooting procedure.
First, I made a backup of all partitions using LGUP. I flashed the unlocked LS997 with US99620f firmware in the "Partition DL" mode via patched LGUP . I have selected all sections except aboot and abootbak. Then, in fastboot mode, I flashed recovery 3.2.2-1. I`ve tried 3.3.1-1, 3.2.3-5, 3.2.3-4, but they can't do format data correctly. Then I flashed modem, modemst1 and modemst2 from the backup in fastboot mode. Then in recovery I flashed the last mk2000 kernel for Oreo - LS997_v2.1-mk2000.zip . Then magisk 19.5
P.S. I need SDMA, so I was flashing the kernel and modem from LS997. For GSM it may not be necessary.
kokos76 said:
First, I made a backup of all partitions using LGUP. I flashed the unlocked LS997 with US99620f firmware in the "Partition DL" mode via patched LGUP . I have selected all sections except aboot and abootbak. Then, in fastboot mode, I flashed recovery 3.2.2-1. I`ve tried 3.3.1-1, 3.2.3-5, 3.2.3-4, but they can't do format data correctly. Then I flashed modem, modemst1 and modemst2 from the backup in fastboot mode. Then in recovery I flashed the last mk2000 kernel for Oreo - LS997_v2.1-mk2000.zip . Then magisk 19.5
P.S. I need SDMA, so I was flashing the kernel and modem from LS997. For GSM it may not be necessary.
Click to expand...
Click to collapse
Very interesting. So all CDMA signal reception from your carrier and all root functions are working?
And did you use TWRP made for the US996 or LS997?
Any particular reason you went with Magisk 19.5 instead of a later version?
Also, there are a few more stock Oreo kernels for the LS997 that you could try (of course they've never really been tested since the regular LS997 on Oreo is unrootable):
- Phoenix591 has converted some of the mk2000 2.2 versions here
- ezzony's ezV2020 kernel also has an LS997 version here
C D said:
Is it 10f or 20f (your screenshots show 20f)? It's certainly interesting to see US996 stock Oreo cross-flashed onto an old LS997 as I have never seen anyone do it before. Do things actually function normally on it?
Anyway, everything's still on ARB0, so you can downgrade any way you like. If you haven't already done so, you'll need to be on 10f in order to do the rooting procedure.
Click to expand...
Click to collapse
it's 20f, not 10f. I had swapped toms to darn near everything on XDA but never happy with any of them. always something not working or I couldn't remove some built-in crap from so-called "stock" roms.
this last go I forget what I was trying to put on it but she stuck in the warning screen and wouldn't boot. i threw so many commands at inside fastboot mode, I am surprised it's not a paperweight. honestly, you name it, I sent it! wipe, format partition, didn't have a concern in the world, and I don't because I have a pixel 4a as the daily driver.
it should be noted, prior to this, I could never get LG Up to work as the app never recognized the phone. after fastboot mode not getting results booting into anything, I said f*ck it and put it into download mode. tiny bit of reading here and shortly after pulling the US996 20f KDZ file from LG, I had a stock RUNNING Oreo!
bro, seriously though, this Oreo runs the best that I've seen! it's smooth and fast! just a little on the heavy side. she's bloated and I need to trim the fat away. LG poisons the phone bad with all their garbage. runs like a champ though
I am extracting stock ls99720a Oreo from ls997 and will test it well before uploading it.