• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[GUIDE] LG G3 D851 Unbrick Qualcomm 9008 Fully Working... Unbrickable D851!

Search This thread

Omar-Avelar

Senior Member
Feb 3, 2013
1,119
2,235
NOTE: Before we begin, let me tell you that from my experience the D851 does not require shorting at all. it will be identified as Qualcomm HS-USB in a brick state without any opening up, check your device manager!

Hello guys, I spent 2 weeks analyzing hex files in order to revive a D851 that I got my hands on. It was not an easy journey but I would like to share this with the devs or people who are looking at bring their bricks to life. ;)

What I did was actually hack the Sahara programmer files that WillCracker (BoardDiag) programs use. This comes in the attached files. Seems like there was no site on the Internet sharing this unique files and thus not allowing us to unrbick the D851.

For a more detailed view of how I got these modified files created please look at this post

But with this uniquely created files we now have unbrickable D851's :), I have revived one D851 phone that I had dead. Right now it already booted into download mode and it is loading the *.tot.

Instructions

  1. Connect your D851 phone without battery via USB to a Windows Box.
  2. Make sure you have installed the HS USB 9008 Drivers installed. If so you will find something called "Qualcomm HS-USB QDLoader 9008 (COMxx)" under device manager, make sure you check the COM Port number, as you will need this later on the next step.
  3. Open up BoardDiag.exe (from the downloaded files here, as it includes modified files specific for D851) and select: B2 (MSM8974AC), and pick up your COM Port.
  4. Under 'Image Extraction' select your bin which should be the *.tot file (I used LG_D851.10C_TOT&DLL.7z).
  5. Hit the 'extract' button into a directory of your choice.
  6. Pick under 'COM Port' the 'Target Dir' and select where you have extracted the *.tot. This will allow us to start flashing the partition files.
    3.png
  7. Select on the checkbox "AP check".
  8. Check the box called "RESTORE BOOT IMG", in here start picking up the partitions, write each one of them (not system, userdata or cache -- those are worthless for now), and ONLY in the end flash LAF and then finally SBL*. After this you will see the phone boot up with the battery icon since you do not have a battery connected. This is when you can tell you have now the bootloader reflashed.
  9. Unplug the USB cable, insert the battery into the phone and hold UP while hooking up the USB cable again. After doing this your phone will boot up in download mode and now you can go ahead and flash the correct firmware using a tool such as LGFlashTool.

    110283d704.jpg



Below you can see a screenshot of the dmesg showing that it is already in download mode (after being in QC HS USB 9008 mode)... I am so !"#$ happy :)

I flashed the partitions like in this other guide but please use the attached file or else it won't work.

16c3lu1.png


NOTE: Do download the attached Willcracker Version I attached specific for the D851, this is a modified one :cool: and is the only type of program I managed to use to revive my phone. I cannot stop insisting that any other set of files will not work on our D851, which is what most people reported on the forums for some time.

EXTRA: Disable Windows driver update, updating the Qualcomm HS-USB driver can cause conflicts and problems on the process.


<< If you like my work here is my hat, please donate! >>

 

Attachments

  • Willcracker_D851.zip
    1.5 MB · Views: 5,659
Last edited:

ExtraDemo

Senior Member
Aug 1, 2016
56
4
hello please i ask for your help

thank you for the great work man
can you please help me in my phone has same problem now it is a month

the problem is that my phone is lg f460s
http%3A%2F%2Fs012.radikal.ru%2Fi319%2F1506%2Fd4%2F3d3f087c44f8.jpg

i have the tot file but because it is a different chip-set Apq8084 this app BoardDiag doesn't support it

can you please modify the app
i searched in so many Korean forums nothing there and Russian forums too

please i donate for you man if you could find .hex singleimage.bin
i gave my phone to some people here but all of them doesn't know how to solve this boot loader problem i knew it can be fixed only by medusa box or octubos box which no body have it here

i found some files which it can revive some other phones having the same processor qualcomm snapdragon 805 like Motorola turbo and nexus 6
like these images
http%3A%2F%2Fi.imgur.com%2FShauKtD.png

Screenshot_2.png

these unbrick files can communicate with lg f460s but because it need a right singleimage and .hex files it cant fix it
please bro try to look for this model i tried for so many weeks now

and thank you again
 

Jyed

Member
Jul 5, 2016
5
1
you are my hero , you saved me thank you sooo much bro , my phone booted in fastboot mode after this , i ll try to flash frimeware now , biiig thnaks to you man
 
  • Like
Reactions: Omar-Avelar

Omar-Avelar

Senior Member
Feb 3, 2013
1,119
2,235
you are my hero , you saved me thank you sooo much bro , my phone booted in fastboot mode after this , i ll try to flash frimeware now , biiig thnaks to you man

No problem man. I am also so glad to have unrbicked that phone as I can now give it to my dad as his phone (a really old Samsung Galaxy S3 was dying of slowness). I hated to have a ~$200.00 brick :cyclops: not being used! And I am a big fan of this LG G3 phone.

Btw, what I did after unrbciking first after fastboot started was that I shutted down my phone by removing the battery, and disconnected the USB cable. Then I reinsrted the battery and put it in download mode by using the: 'Keep pressing up and insert the USB cable'... and after that re-flashed the *.tot using downloaded mode as it is way faster with LGFlashTool.

110283d704.jpg
 
Last edited:

adrianbravom

Member
Oct 20, 2013
43
17
@Omar-Avelar , Man, today i've seen my pm box and checked your message and looked here, nothing to say just.

THANKS, YOU SAVED ME! THANKS A LOT.

I've set the phone in download mode now, but when it begin the d851 firmware flash says cross DL SWversion, thats because i have a frankenstain phone, thats what've caused me a brick, what i need to do to set the d851 firmware?

Look at the images

ERROR:
ZkP2lJu.png


My phone in dload mode says that:
cSFLyxI.png


and my motherboard:
oKwvp9t.png


I suposse that it can be fixed, but what i need to do?.

THANKS AGAIN MASTER! IM SO HAPPY

Where can i donate to you? Sorry for my english haha.

Edit: i've saw your firm now i'll donate you.
 
Last edited:

Omar-Avelar

Senior Member
Feb 3, 2013
1,119
2,235
@Omar-Avelar , Man, today i've seen my pm box and checked your message and looked here, nothing to say just.

THANKS, YOU SAVED ME! THANKS A LOT.

I've set the phone in download mode now, but when it begin the d851 firmware flash says cross DL SWversion, thats because i have a frankenstain phone, thats what've caused me a brick, what i need to do to set the d851 firmware?

I suposse that it can be fixed, but what i need to do?.

THANKS AGAIN MASTER! IM SO HAPPY

Where can i donate to you? Sorry for my english haha.

Edit: i've saw your firm now i'll donate you.

I've faced the same fate as you because I flashed a D855 on a Phone that was a refurbished D851. Took me like a month to figure out how to unbrick it.

By the looks of it it seems that your phone still has the LAF partition of the D855 but you recovered the other bootloder partition files allowing you to boot into the download mode 'thinking' it is a D855.

I suggest you use the LGUP_8974.dll instead of the 'supposed' D851 *.dll in the *.tot files... I think that will flash the partitions regardless if it is a D855 or 851 and force enter the files.
 
Last edited:
  • Like
Reactions: optimaxx

adrianbravom

Member
Oct 20, 2013
43
17
I've faced the same fate as you because I flashed a D855 on a Phone that was a refurbished D851. Took me like a month to figure out how to unbrick it.

By the looks of it it seems that your phone still has the LAF partition of the D855 but you recovered the other bootloder partition files allowing you to boot into the download mode 'thinking' it is a D855.

I suggest you use the LGUP_8974.dll instead of the 'supposed' D851 *.dll in the *.tot files... I think that will flash the partitions regardless if it is a D855 or 851 and force enter the files.

Well, that images posted before whas with lgup_8974.dll and gives me the errors, I think I need to modify the hex file to put it as a "d855" and makes the program recognizes it, me fear is that if I flash the d851 firmware maybe I can loose the imei a mobile information ( before the brick the phone has d855 software ) or it will not erase my efs partition ? What u recommend me ? Flash d855 or d851 tot?
 
  • Like
Reactions: optimaxx

Omar-Avelar

Senior Member
Feb 3, 2013
1,119
2,235
Well, that images posted before whas with lgup_8974.dll and gives me the errors, I think I need to modify the hex file to put it as a "d855" and makes the program recognizes it, me fear is that if I flash the d851 firmware maybe I can loose the imei a mobile information ( before the brick the phone has d855 software ) or it will not erase my efs partition ? What u recommend me ? Flash d855 or d851 tot?

If it is a D851 motherboard but seen as a D855 via firmware I would try using the *.dll of D855 and the *.tot file of D851.

Seems like while being in HS-USB 9008 mode one of the partitions was not flashed correctly and the downloader mode still sees it as D855. The other option would be to brick it again with D855 *.dll and *.tot if the first try does not work. And while being in HS-USB 9008 mode please make sure you do flash most of the partitions there (not system, nor userdata, not cache) but the rest and end up with LAF > SBL* partition. That will flash the correct *.tot files for D851 and hopefully you will see the D851 now as D851 in the downloader mode.

I believe IIRC that the LAF partition has the downloader, and that's the one I believe is still written from when you overwrote it as a D855. If you wrote SBL* before LAF it might have booted with the LAF partition of the D855.
 
Last edited:
  • Like
Reactions: optimaxx

adrianbravom

Member
Oct 20, 2013
43
17
All done! Phone works and is alive!, @Omar-Avelar i've did what i told you, i've used a hex editor in a linux distro and modified the first "D851" mention to "D855" and goodbye CrossDL error, flashed sucessly, now my phone it's a real D851 and its hardunbricked! thanks all to you, you are great!.
 
  • Like
Reactions: optimaxx

h.nam94

Member
Mar 25, 2014
45
3
Hanoi
Thank you, sir. You are live saver.
I have bricked my phone (d851) and I had been looking for days and nothing works.
Fortunately, I went to this thread and had successfully unbrick my phone.
God bless you.

D851 unbrickable :)
 
Aug 1, 2016
18
1
I've faced the same fate as you because I flashed a D855 on a Phone that was a refurbished D851. Took me like a month to figure out how to unbrick it.

By the looks of it it seems that your phone still has the LAF partition of the D855 but you recovered the other bootloder partition files allowing you to boot into the download mode 'thinking' it is a D855.

I suggest you use the LGUP_8974.dll instead of the 'supposed' D851 *.dll in the *.tot files... I think that will flash the partitions regardless if it is a D855 or 851 and force enter the files.


My case is almost similar. As per software info it was d855 before bricking. So I flashed mm kdz for d855 and bricked.then I opened the cover and found this has a d851 board. So ,as per this tutorial I flashed everything for d851.phone booted but booting into fastboot mode only no download mode. Then I followed some other tutorial and again flashed laf. Img .now it can enter in download mode. But have a big problem .As it was a real d851 rom it cant connect to 3g net work here in india(2g ok). Now I am so disappointed because such a good phone with 2g only.....


But how initially d855 rom was flashed on d851 board???? There may be a way..

Ofcourse only beacuse of thread my g3 is live now. Please help me to get full out put from that.

There are threads to manually add bands to qualcomm device.Can I go for that?
 

Omar-Avelar

Senior Member
Feb 3, 2013
1,119
2,235
My case is almost similar. As per software info it was d855 before bricking. So I flashed mm kdz for d855 and bricked.then I opened the cover and found this has a d851 board. So ,as per this tutorial I flashed everything for d851.phone booted but booting into fastboot mode only no download mode. Then I followed some other tutorial and again flashed laf. Img .now it can enter in download mode. But have a big problem .As it was a real d851 rom it cant connect to 3g net work here in india(2g ok). Now I am so disappointed because such a good phone with 2g only.....


But how initially d855 rom was flashed on d851 board???? There may be a way..

Ofcourse only beacuse of thread my g3 is live now. Please help me to get full out put from that.

There are threads to manually add bands to qualcomm device.Can I go for that?
Yes, it is such a great feeling to be able to bring the phone back from the death. :)

BTW, I do believe also the phone bands can be changed using QPST since I have seen Argentinian D855 phones changed to D855P (Adding another LTE band).

You might need another phone reference (LG G3 that worka on the band you want) and using QPST might let you modify some specifics.

Go ahead and Google translate this post for analysis: http://www.grupoandroid.com/topic/112493-guia-habilitar-bandas-lte-para-argentina-en-d855-int/
 

totbatotammo

Member
Mar 13, 2015
16
0
Lahore
Another success in reviving the dead lg g3

NOTE: Do download the attached Willcracker Version I attached specific for the D851, this is a modified one :cool: and is the only type of program I managed to use to revive my phone. I cannot stop insisting that any other set of files will not work on our D851, which is what most people reported on the forums for some time.

Thank your thread was really helpful in getting somewhere, You are the champion :good::cowboy::victory:

---------- Post added at 07:53 AM ---------- Previous post was at 07:52 AM ----------

All done! Phone works and is alive!, @Omar-Avelar i've did what i told you, i've used a hex editor in a linux distro and modified the first "D851" mention to "D855" and goodbye CrossDL error, flashed sucessly, now my phone it's a real D851 and its hardunbricked! thanks all to you, you are great!.

Can you please direct me somewhere or guide by yourself on how to do this. :eek:
 

Buthers

Member
Aug 14, 2016
9
0
Hey , could anyone help me? i have a lg l40 d175f, and i have boarddiag ,the kdz files but i do not have the partition.txt, what do I have to do??? please save me, this is not a monster phone but i don't have money to buy another one :(
 

mickeyasamoah

Senior Member
Jan 11, 2013
979
229
Accra
[*]Open up BoardDiag.exe (from the downloaded files here, as it includes modified files specific for D851) and select: B2 (MSM8974AC), and pick up your COM Port.

Modified Files huh??
The miracle file is a file that has been around all along. It can be found in the Smartboot Diag Tool. Its called LGD851_ATMO_TMUS.mbn.
All you have to do is rename this file to 2nd_loader.hex and put it inside the Board DIag Tool > Model > B2(MSM8974AC) Folder. Replace this file with the old one.
Now start Board Diag tool and load and decompress your tot file, and flash away.

For other models, you could try renaming your devices mbn from the Smartboot Diag tool to 2nd_loader.hex
 
  • Like
Reactions: ExtraDemo

ExtraDemo

Senior Member
Aug 1, 2016
56
4
wow

Modified Files huh??
The miracle file is a file that has been around all along. It can be found in the Smartboot Diag Tool. Its called LGD851_ATMO_TMUS.mbn.
All you have to do is rename this file to 2nd_loader.hex and put it inside the Board DIag Tool > Model > B2(MSM8974AC) Folder. Replace this file with the old one.
Now start Board Diag tool and load and decompress your tot file, and flash away.

For other models, you could try renaming your devices mbn from the Smartboot Diag tool to 2nd_loader.hex

can you provide same file for lg g3 f460s ? it has chipset apq8084 . thank you i advance
 

Top Liked Posts

  • There are no posts matching your filters.
  • 13
    NOTE: Before we begin, let me tell you that from my experience the D851 does not require shorting at all. it will be identified as Qualcomm HS-USB in a brick state without any opening up, check your device manager!

    Hello guys, I spent 2 weeks analyzing hex files in order to revive a D851 that I got my hands on. It was not an easy journey but I would like to share this with the devs or people who are looking at bring their bricks to life. ;)

    What I did was actually hack the Sahara programmer files that WillCracker (BoardDiag) programs use. This comes in the attached files. Seems like there was no site on the Internet sharing this unique files and thus not allowing us to unrbick the D851.

    For a more detailed view of how I got these modified files created please look at this post

    But with this uniquely created files we now have unbrickable D851's :), I have revived one D851 phone that I had dead. Right now it already booted into download mode and it is loading the *.tot.

    Instructions

    1. Connect your D851 phone without battery via USB to a Windows Box.
    2. Make sure you have installed the HS USB 9008 Drivers installed. If so you will find something called "Qualcomm HS-USB QDLoader 9008 (COMxx)" under device manager, make sure you check the COM Port number, as you will need this later on the next step.
    3. Open up BoardDiag.exe (from the downloaded files here, as it includes modified files specific for D851) and select: B2 (MSM8974AC), and pick up your COM Port.
    4. Under 'Image Extraction' select your bin which should be the *.tot file (I used LG_D851.10C_TOT&DLL.7z).
    5. Hit the 'extract' button into a directory of your choice.
    6. Pick under 'COM Port' the 'Target Dir' and select where you have extracted the *.tot. This will allow us to start flashing the partition files.
      3.png
    7. Select on the checkbox "AP check".
    8. Check the box called "RESTORE BOOT IMG", in here start picking up the partitions, write each one of them (not system, userdata or cache -- those are worthless for now), and ONLY in the end flash LAF and then finally SBL*. After this you will see the phone boot up with the battery icon since you do not have a battery connected. This is when you can tell you have now the bootloader reflashed.
    9. Unplug the USB cable, insert the battery into the phone and hold UP while hooking up the USB cable again. After doing this your phone will boot up in download mode and now you can go ahead and flash the correct firmware using a tool such as LGFlashTool.

      110283d704.jpg



    Below you can see a screenshot of the dmesg showing that it is already in download mode (after being in QC HS USB 9008 mode)... I am so !"#$ happy :)

    I flashed the partitions like in this other guide but please use the attached file or else it won't work.

    16c3lu1.png


    NOTE: Do download the attached Willcracker Version I attached specific for the D851, this is a modified one :cool: and is the only type of program I managed to use to revive my phone. I cannot stop insisting that any other set of files will not work on our D851, which is what most people reported on the forums for some time.

    EXTRA: Disable Windows driver update, updating the Qualcomm HS-USB driver can cause conflicts and problems on the process.


    << If you like my work here is my hat, please donate! >>

    1
    you are my hero , you saved me thank you sooo much bro , my phone booted in fastboot mode after this , i ll try to flash frimeware now , biiig thnaks to you man
    1
    @Omar-Avelar , Man, today i've seen my pm box and checked your message and looked here, nothing to say just.

    THANKS, YOU SAVED ME! THANKS A LOT.

    I've set the phone in download mode now, but when it begin the d851 firmware flash says cross DL SWversion, thats because i have a frankenstain phone, thats what've caused me a brick, what i need to do to set the d851 firmware?

    I suposse that it can be fixed, but what i need to do?.

    THANKS AGAIN MASTER! IM SO HAPPY

    Where can i donate to you? Sorry for my english haha.

    Edit: i've saw your firm now i'll donate you.

    I've faced the same fate as you because I flashed a D855 on a Phone that was a refurbished D851. Took me like a month to figure out how to unbrick it.

    By the looks of it it seems that your phone still has the LAF partition of the D855 but you recovered the other bootloder partition files allowing you to boot into the download mode 'thinking' it is a D855.

    I suggest you use the LGUP_8974.dll instead of the 'supposed' D851 *.dll in the *.tot files... I think that will flash the partitions regardless if it is a D855 or 851 and force enter the files.
    1
    I've faced the same fate as you because I flashed a D855 on a Phone that was a refurbished D851. Took me like a month to figure out how to unbrick it.

    By the looks of it it seems that your phone still has the LAF partition of the D855 but you recovered the other bootloder partition files allowing you to boot into the download mode 'thinking' it is a D855.

    I suggest you use the LGUP_8974.dll instead of the 'supposed' D851 *.dll in the *.tot files... I think that will flash the partitions regardless if it is a D855 or 851 and force enter the files.

    Well, that images posted before whas with lgup_8974.dll and gives me the errors, I think I need to modify the hex file to put it as a "d855" and makes the program recognizes it, me fear is that if I flash the d851 firmware maybe I can loose the imei a mobile information ( before the brick the phone has d855 software ) or it will not erase my efs partition ? What u recommend me ? Flash d855 or d851 tot?
    1
    Well, that images posted before whas with lgup_8974.dll and gives me the errors, I think I need to modify the hex file to put it as a "d855" and makes the program recognizes it, me fear is that if I flash the d851 firmware maybe I can loose the imei a mobile information ( before the brick the phone has d855 software ) or it will not erase my efs partition ? What u recommend me ? Flash d855 or d851 tot?

    If it is a D851 motherboard but seen as a D855 via firmware I would try using the *.dll of D855 and the *.tot file of D851.

    Seems like while being in HS-USB 9008 mode one of the partitions was not flashed correctly and the downloader mode still sees it as D855. The other option would be to brick it again with D855 *.dll and *.tot if the first try does not work. And while being in HS-USB 9008 mode please make sure you do flash most of the partitions there (not system, nor userdata, not cache) but the rest and end up with LAF > SBL* partition. That will flash the correct *.tot files for D851 and hopefully you will see the D851 now as D851 in the downloader mode.

    I believe IIRC that the LAF partition has the downloader, and that's the one I believe is still written from when you overwrote it as a D855. If you wrote SBL* before LAF it might have booted with the LAF partition of the D855.