• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

Guide LG G8/G8x/v50 Bootloader Unlock and Magisk Root using Firehose

Search This thread

sasindu

Member
Oct 10, 2012
34
2
Terribly sorry but I am not familiar with what you're experiencing. I've never seen that and don't know anything about 30 attempt key anything.

The orange message is that the boot loader is unlocked, have seen that a million times, and there's nothing u can do about that happening.

I did find the needed boot image with magisk patched. I know it says v50 but it's indicated to work with g8 also. Be sure to back up current one and name it so you'll remember what it is and what it isn't ;)
Thanks a lot man.
Finally i resetted it successfully.

I think ill try the rooting part tomorrow.

Again thanks a lot man. Ill try with this boot partition tomorrow. Ur a lifesaver. Thanks for all ur replies.
 

sasindu

Member
Oct 10, 2012
34
2
Disclaimer: I am not responsible for any problems from using this guide.
Works for G8, G8s, G8x, and v50
Confirmed working on G8 and v50

Requirements: Android 10

QFIL: https://drive.google.com/file/d/1P7uGjIirqGRdkwlxgKf_idepDlv6_u-q/view?usp=sharing
QFIL Driver: https://drive.google.com/file/d/1sPJm1RuSoVX9JMEs-Gx8xNuEDadO6rpj/view?usp=sharing
LG Mobile Driver:
ADB: https://drive.google.com/file/d/1nvlwaicFpDN_4DGR0BZRWUDgwQwYzOhS/view?usp=sharing
Firehose: https://drive.google.com/file/d/1ekI_d2-P9GdoakkSgk2hK1WHbQLIPlTQ/view?usp=sharing
abl: https://drive.google.com/file/d/1sye4gXsDfD8JVF5qfAMG_GDxSLKY6J6Q/view?usp=sharing

Verizon LG G8 only frp: https://drive.google.com/file/d/1294cXerj2_EkeGw1p38CcVPuyRfdS9N5/view?usp=sharing
This Verizon FRP img was only tested on LG G8 Verizon and is not recommended to be used on other Verizon Variants as it will prevent the phone from booting.

Bootloader Unlock
Unlocking your bootloader will erase all data on your phone

First Install LG Mobile Driver, QFIL driver, and QFIL (Select first option, WWAN)

All Variants other than Verizon: Go to Settings, > System > About Phone > Software Info > Tap Build Number 7 Times.
Go back to Settings > System > Developer Options. Check Enable OEM Unlock


Boot you phone into EDL
You can make sure that your phone is in EDL by plugging your phone to your pc and checking the Device Manager > Ports > Qualcom HS-USB QDLoader 9008 (COM#)
Hold Vol- and Power, when the phone screen turns off to restart begin quickly pressing the vol+ but keep holding vol- and power.
Here is a youtube video of how to boot to EDL:

Open QFIL, Select your Phone's Port, Select Flat Build under Select Build Type, Select the Firehose.elf file under Select Programmer, on the bottom right of QFIL select UFS as the Storage Type.
Click Tools > Partition Manager.
Find Abl_a and right click on it and select Manage Partition Data. Click Read to backup your abl_a.
Go to Windows Explorer and go to C:\Users\Username\AppData\Roaming\Qualcomm\QFIL\COMPORT#
Rename your ReadData_ufs_Lun4.bin to abl_a.bin

Do the same with abl_b, boot_a, and boot_b.
Boot_a and Boot_b is for Magisk Root. Skip if you only want Bootloader Unlock.
Close Partition Manager. Your phone will reboot to EDL on its own after pressing OK. Wait on that.

Go back to Partition Manager and right click on abl_a again then select Manage Partition Data, then Select Load and choose the abl engineering file.
Do the same for abl_b.
Close Partition Manager. Your phone will reboot to EDL on its own after pressing OK. Wait on that.

Reboot to Fastboot. Hold Vol- and Power then release power when reboot starts and keep holding vol-
If that doesn't work unplug and Power off your phone. Hold vol- and plug it in. It should go into fastboot.
Once your phone is in Fastboot it should say
Device State: Locked and Active A/B Slot - _a or _b
remember whichever slot your device says and stay on that slot, you may risk bricking if you change to the other slot. You also need this for Root later.

Extract the ADB.zip
open a Command Prompt and change the directory to the adb folder you just extracted
cd C:\adb
run fastboot devices in that command prompt. it should show "LMG850UM fastboot"

Move the backed up abl_a.bin and abl_b.bin to the adb folder, also frp_verizon.img if you have the verizon LG G8.
Verizon LG G8 only: Run fastboot flash frp frp_verizon.img then fastboot reboot-bootloader

Reboot to Fastboot. Hold Vol- and Power then release power when reboot starts and keep holding vol-
If that doesn't work unplug and Power off your phone. Hold vol- and plug it in. It should go into fastboot.
Run fastboot oem unlock
Select Unlock The Bootloader with your arrow keys and press the Power Button
Reboot back to the Bootloader. Unplug your phone, Power off, Hold Vol-, then Plug it in.
Your phone should say Device State – unlocked now


Now fastboot flash abl_a abl_a.bin
and fastboot flash abl_b abl_b.bin
Finish with fastboot reboot
Your Phone Is now Bootloader Unlocked.





Magisk Root
Only do this after you have followed the above guide and have Unlocked your Bootloader.


Magisk
Xda Forum: https://forum.xda-developers.com/f/magisk.5903/
Xda Thread: https://forum.xda-developers.com/t/magisk-the-magic-mask-for-android.3473445/
Github Page: https://github.com/topjohnwu/Magisk


Find the slot you are on from the fastboot bootloader earlier
Go to Windows Explorer and go to C:\Users\Username\AppData\Roaming\Qualcomm\QFIL\COMPORT#
Transfer to your phone the boot_a.bin or boot_b.bin that you backed up in the COMPORT# folder.

Download and install Magisk Manager.
Open Magisk Manager and beside Magisk hit "Install" then "Select and Patch a File" and select the boot_a.bin or boot_b.bin.
After Magisk has patched your boot img you should have magisk_patched#####.img in your phones Download folder.
Transfer it to your PC.

Reboot to EDL
Open QFIL. Click Tools > Partition Manager.
Find the slot you are on from the fastboot bootloader earlier and right click on either boot_a or boot_b and select Manage Partition Data.
Click Load and select the magisk_patched#####.img file you transfered from your phone.
Wait for it to finish then Close Partition Manager. Your phone will reboot to EDL on its own after pressing OK. Wait on that.

Reboot to System by holding vol- and power till your phone reboots out of EDL then release both.
Your phone is now Bootloader Unlocked with Magisk Root.






Hopefully this helps.
This guide was written by me, but the information was provided by Cloud1250000.
If there are any errors let me know and I will fix.
I tried this final rooting step.
1. Copied boot a bin to phone.
2. Patched the file with magisk. First time magisk just closed and created a 0 byte file. But i deleted it and again patched it and cteated the img.
3. Transfered it to pc
4. Selected boot a with partition manager and loaded the img file
5. Then closed partition manager and rebooted.

After this phone went to a bootloop. Any idea what iam doing wrong?
 

sasindu

Member
Oct 10, 2012
34
2
I tried this final rooting step.
1. Copied boot a bin to phone.
2. Patched the file with magisk. First time magisk just closed and created a 0 byte file. But i deleted it and again patched it and cteated the img.
3. Transfered it to pc
4. Selected boot a with partition manager and loaded the img file
5. Then closed partition manager and rebooted.

After this phone went to a bootloop. Any idea what iam doing wrong?
Anyway thank you all for helping. I figured it. As Quadrplax said in his post you should NOT keep SECURE START UP enabled. After disabling this i managed to successfully root too.

Again thank you very much all for your support.
 

sasindu

Member
Oct 10, 2012
34
2
Terribly sorry but I am not familiar with what you're experiencing. I've never seen that and don't know anything about 30 attempt key anything.

The orange message is that the boot loader is unlocked, have seen that a million times, and there's nothing u can do about that happening.

I did find the needed boot image with magisk patched. I know it says v50 but it's indicated to work with g8 also. Be sure to back up current one and name it so you'll remember what it is and what it isn't ;)
AsltLies, i didnt flash the provided image as i was wrong yesterday. Its 20v. Not 20b. Sorry man. My bad. I didnt want to trouble you again.
Finally i managed to root by flashing magisk patched image. The secret was disabling secure start up as quadrplax said.

Thank you for all your help.
 
  • Like
Reactions: AsItLies

leopard_fist

Senior Member
Jul 31, 2013
108
12
Before I try rooting again, can someone tell me, or point me to a resource that explains, how I can back things up, so that if something goes wrong, I can start back over from square one? I can't make a nandroid backup because I don't have twrp. I guess a proper kdz would do it. Is there some sort of device backup in qfil?
thanks very much!
 

AsItLies

Senior Member
Nov 4, 2009
1,356
527
tucson
Google Pixel 3
Before I try rooting again, can someone tell me, or point me to a resource that explains, how I can back things up, so that if something goes wrong, I can start back over from square one? I can't make a nandroid backup because I don't have twrp. I guess a proper kdz would do it. Is there some sort of device backup in qfil?
thanks very much!

So you don't say which OS yer running now, that's important because some of them, like at&t and sprint, don't make their kdz available.

So if u are running other than those, then u have a kdz available and u don't need a full backup, only to back up relevant partitions to your imei / sn, which would be ftm, fsg, modem, modemst1 and modemst2.

If u are running one of those, then the only option (other than doing ea partition in qfil), would be the bkerler edl python scripts. They can create an entire backup and also create the rawprogram.xml needed to flash all the partitions back.

good luck
 

sasindu

Member
Oct 10, 2012
34
2
Quick question. I successfully unlocked bootloader and rooted. If i crossflash a kdz will it lock bootloader and unroot the device?
Thanks
 

sasindu

Member
Oct 10, 2012
34
2
No, it does not relock the bootloader.
Thanks AsltLies. Do u have any idea that can we flash the us unlcoked kdz (g820qm) one to korean g820n successfully? Because i want to completely remove this korean letters and all. And as per my knowledge us g8 comes with dual camera and korean one has tripple camera. Will it be a problem?
Thanks
 

AsItLies

Senior Member
Nov 4, 2009
1,356
527
tucson
Google Pixel 3
Thanks AsltLies. Do u have any idea that can we flash the us unlcoked kdz (g820qm) one to korean g820n successfully? Because i want to completely remove this korean letters and all. And as per my knowledge us g8 comes with dual camera and korean one has tripple camera. Will it be a problem?
Thanks

As far as camera goes, no idea as have never done that. Pretty sure though u can get the lg camera apk from korean and install on us version, may work, may not. Try and find out.

As far as x-flashing goes, first, we have 2 ways to do that. 1) would be the way u use the kdz and lgup, 2) would be the using qfil and flashing certain partitions and changing totc file using twrp.

The 2nd way didn't work for me because the OP partition of US Open is much bigger than OP partition size for korean open. While there are ways around that, which include changing GPT table sizes, I decided against that personally.

the 1st way should accomplish what u want, as it would give u the us open OP partition, meaning vowifi and volte would work, no korean verbiage, etc etc.

But there is one caveat here, I did the above (both methods) with an original Sprint G8. Some have noted that there are some differences with the Korean G8 (original). So I can't verify it would work. Think the only way to know for sure is to try it.

cheers
 
  • Like
Reactions: sasindu

sasindu

Member
Oct 10, 2012
34
2
As far as camera goes, no idea as have never done that. Pretty sure though u can get the lg camera apk from korean and install on us version, may work, may not. Try and find out.

As far as x-flashing goes, first, we have 2 ways to do that. 1) would be the way u use the kdz and lgup, 2) would be the using qfil and flashing certain partitions and changing totc file using twrp.

The 2nd way didn't work for me because the OP partition of US Open is much bigger than OP partition size for korean open. While there are ways around that, which include changing GPT table sizes, I decided against that personally.

the 1st way should accomplish what u want, as it would give u the us open OP partition, meaning vowifi and volte would work, no korean verbiage, etc etc.

But there is one caveat here, I did the above (both methods) with an original Sprint G8. Some have noted that there are some differences with the Korean G8 (original). So I can't verify it would work. Think the only way to know for sure is to try it.

cheers
Thanks AsltLies.
Ill let u know if i succeed in this.
 

leopard_fist

Senior Member
Jul 31, 2013
108
12
So you don't say which OS yer running now, that's important because some of them, like at&t and sprint, don't make their kdz available.

So if u are running other than those, then u have a kdz available and u don't need a full backup, only to back up relevant partitions to your imei / sn, which would be ftm, fsg, modem, modemst1 and modemst2.

If u are running one of those, then the only option (other than doing ea partition in qfil), would be the bkerler edl python scripts. They can create an entire backup and also create the rawprogram.xml needed to flash all the partitions back.

good luck

AsItLies,​


what do you think about this guide for doing a full backup of the phone with qfil?

it seems to show how to make a phone's full storage show up in windows, so a backup could be made with a windows imaging program of choice (and similarly restore)


How to full backup any qualcomm phone (no root)​

 
Last edited:

AsItLies

Senior Member
Nov 4, 2009
1,356
527
tucson
Google Pixel 3

AsItLies,​


what do you think about this guide for doing a full backup of the phone with qfil?

it seems to show how to make a phone's full storage show up in windows, so a backup could be made with a windows imaging program of choice (and similarly restore)


How to full backup any qualcomm phone (no root)​


Have never done that, looks to be moderately involved. I'd suggest to try the bkerler python edl scripts. Because they are python they can be run under windows or linux (I much prefer linux).

Additionally, bkerler has made an iso image available in his latest release of the utilities. So u can flash that to a usb drive, boot it, and you'll have a complete linux environment with his utilities and all dependencies already resolved. Follow this link for the readme file.

So that too may be 'involved' also, depending on experience. It's linux based so u have to use a 'shell'. Also it's a command line interface, not a gui. But they work very well to backup a device completely.

cheers
 

leopard_fist

Senior Member
Jul 31, 2013
108
12
a couple of thoughts regarding my attempts to get this phone rooted:

originally a week and a half ago on my first try, after unlocking the bootloader, when i went into qfil to restore my stock abl_a, abl_ b files, i didnt understand why the restore didnt restore my touchscreen. it turned out, for whatever reason, qfil didn't make proper backups of those files hence no return of touchscreen. i met the same problem on this second try, but fortunately i found that someone on this thread with my same model had shared their abl_a, abl_b files - which i downloaded, restored with qfil, and touch was properly restored.

once touch was restored, it was simple enough to continue with the root process by flashing the magisk patched boot image to the abl partition

just starting to kick around with the phone-installed viper4android, viper is pushing some mighty good sound quality from my musepack audio files ;)
 

AsItLies

Senior Member
Nov 4, 2009
1,356
527
tucson
Google Pixel 3
. it turned out, for whatever reason, qfil didn't make proper backups of those files hence no return of touchscreen.

the reason qfil will have trouble making backups or restoring properly is, in my experience, because u need to use a usb 2.0 port, not a 3.0.

qfil is old software, developed before usb 3.0 speeds, and thus doesn't handle those speeds appropriately.

My latest laptop doesn't have a usb 2.0 port, so to get around that I have an old usb 2.0 cable and an adapter to make it work with the phone. I suppose you could also set the baud rate for the port it's using.

cheers
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    i need help. im on the steps where you load the abl_a.bin modified boot. and im watching a video and he a option to save the partition. On Qfil i only have the option close. Do i have to save it or can i continue

    Looks like you missed a part, you're suppose to left click the partition you want to modify / save / change, and then right click it and select 'manage partition'.

    It's at that point you have the option to erase, load, etc. The output, at the bottom of the qfil app will tell you success / failure etc.

    cheers
    1
    Having same issues after upgrading to a11 I followed magisk root steps and till now no way to root how did you fix yours you mind explaining

    For Magisk, do you tick the option "Preserve force encryption"? and so it's better to stay on Android 10 for rooting right?
  • 52
    Disclaimer: I am not responsible for any problems from using this guide.
    Works for G8, G8s, G8x, and v50
    Confirmed working on G8 and v50

    Requirements: Android 10

    QFIL: https://drive.google.com/file/d/1P7uGjIirqGRdkwlxgKf_idepDlv6_u-q/view?usp=sharing
    QFIL Driver: https://drive.google.com/file/d/1sPJm1RuSoVX9JMEs-Gx8xNuEDadO6rpj/view?usp=sharing
    LG Mobile Driver:
    ADB: https://drive.google.com/file/d/1nvlwaicFpDN_4DGR0BZRWUDgwQwYzOhS/view?usp=sharing
    Firehose: https://drive.google.com/file/d/1ekI_d2-P9GdoakkSgk2hK1WHbQLIPlTQ/view?usp=sharing
    abl: https://drive.google.com/file/d/1sye4gXsDfD8JVF5qfAMG_GDxSLKY6J6Q/view?usp=sharing

    Verizon LG G8 only frp: https://drive.google.com/file/d/1294cXerj2_EkeGw1p38CcVPuyRfdS9N5/view?usp=sharing
    This Verizon FRP img was only tested on LG G8 Verizon and is not recommended to be used on other Verizon Variants as it will prevent the phone from booting.

    Bootloader Unlock
    Unlocking your bootloader will erase all data on your phone

    First Install LG Mobile Driver, QFIL driver, and QFIL (Select first option, WWAN)

    All Variants other than Verizon: Go to Settings, > System > About Phone > Software Info > Tap Build Number 7 Times.
    Go back to Settings > System > Developer Options. Check Enable OEM Unlock
    Enable OEM Unlock.jpg


    Boot you phone into EDL
    You can make sure that your phone is in EDL by plugging your phone to your pc and checking the Device Manager > Ports > Qualcom HS-USB QDLoader 9008 (COM#)
    Device Manager - Ports.jpg
    Hold Vol- and Power, when the phone screen turns off to restart begin quickly pressing the vol+ but keep holding vol- and power.
    Here is a youtube video of how to boot to EDL:

    Open QFIL, Select your Phone's Port, Select Flat Build under Select Build Type, Select the Firehose.elf file under Select Programmer, on the bottom right of QFIL select UFS as the Storage Type.
    QFIL.jpg
    Click Tools > Partition Manager.
    Find Abl_a and right click on it and select Manage Partition Data. Click Read to backup your abl_a.
    right click manage partition data.jpg
    Go to Windows Explorer and go to C:\Users\Username\AppData\Roaming\Qualcomm\QFIL\COMPORT#
    Rename your ReadData_ufs_Lun4.bin to abl_a.bin
    change readdata to abl.jpg

    Do the same with abl_b, boot_a, and boot_b.
    Boot_a and Boot_b is for Magisk Root. Skip if you only want Bootloader Unlock.
    abl a and b finished.jpg
    Close Partition Manager. Your phone will reboot to EDL on its own after pressing OK. Wait on that.

    Go back to Partition Manager and right click on abl_a again then select Manage Partition Data, then Select Load and choose the abl engineering file.
    Do the same for abl_b.
    Close Partition Manager. Your phone will reboot to EDL on its own after pressing OK. Wait on that.

    Reboot to Fastboot. Hold Vol- and Power then release power when reboot starts and keep holding vol-
    If that doesn't work unplug and Power off your phone. Hold vol- and plug it in. It should go into fastboot.
    Once your phone is in Fastboot it should say
    Device State: Locked and Active A/B Slot - _a or _b
    remember whichever slot your device says and stay on that slot, you may risk bricking if you change to the other slot. You also need this for Root later.
    Fastboot Bootloader Locked and Slot.jpg

    Extract the ADB.zip
    open a Command Prompt and change the directory to the adb folder you just extracted
    cd C:\adb
    run fastboot devices in that command prompt. it should show "LMG850UM fastboot"

    Move the backed up abl_a.bin and abl_b.bin to the adb folder, also frp_verizon.img if you have the verizon LG G8.
    Move abl a and b to adb folder.jpg
    Verizon LG G8 only: Run fastboot flash frp frp_verizon.img then fastboot reboot-bootloader

    Reboot to Fastboot. Hold Vol- and Power then release power when reboot starts and keep holding vol-
    If that doesn't work unplug and Power off your phone. Hold vol- and plug it in. It should go into fastboot.
    Run fastboot oem unlock
    Select Unlock The Bootloader with your arrow keys and press the Power Button
    BL Unlock NoYes.jpg
    Reboot back to the Bootloader. Unplug your phone, Power off, Hold Vol-, then Plug it in.
    Your phone should say Device State – unlocked now
    Fastboot Bootloader Unlocked and Slot.jpg


    Now fastboot flash abl_a abl_a.bin
    and fastboot flash abl_b abl_b.bin
    Finish with fastboot reboot
    Your Phone Is now Bootloader Unlocked.





    Magisk Root
    Only do this after you have followed the above guide and have Unlocked your Bootloader.


    Magisk
    Xda Forum: https://forum.xda-developers.com/f/magisk.5903/
    Xda Thread: https://forum.xda-developers.com/t/magisk-the-magic-mask-for-android.3473445/
    Github Page: https://github.com/topjohnwu/Magisk


    Find the slot you are on from the fastboot bootloader earlier
    Go to Windows Explorer and go to C:\Users\Username\AppData\Roaming\Qualcomm\QFIL\COMPORT#
    Transfer to your phone the boot_a.bin or boot_b.bin that you backed up in the COMPORT# folder.

    Download and install Magisk Manager.
    Open Magisk Manager and beside Magisk hit "Install" then "Select and Patch a File" and select the boot_a.bin or boot_b.bin.
    After Magisk has patched your boot img you should have magisk_patched#####.img in your phones Download folder.
    Transfer it to your PC.

    Reboot to EDL
    Open QFIL. Click Tools > Partition Manager.
    Find the slot you are on from the fastboot bootloader earlier and right click on either boot_a or boot_b and select Manage Partition Data.
    Click Load and select the magisk_patched#####.img file you transfered from your phone.
    Wait for it to finish then Close Partition Manager. Your phone will reboot to EDL on its own after pressing OK. Wait on that.

    Reboot to System by holding vol- and power till your phone reboots out of EDL then release both.
    Your phone is now Bootloader Unlocked with Magisk Root.






    Hopefully this helps.
    This guide was written by me, but the information was provided by Cloud1250000.
    If there are any errors let me know and I will fix.
    6
    Go back to Partition Manager and right click on abl_a again then select Manage Partition Data, then Select Load and choose the abl engineering file.
    Do the same for abl_b.


    Maybe I'm not catching on to something but, following the guide I don't have a abl_b.bin file besides the one backed up.
    There was a link provided for an abl_a.bin file.
    What am I not understanding?

    Okay I got it this morning. Reread it still didn't understand but had some hunches so check around the net about LG dual sim unlocking and then it clicked. It was meant to say load the engineering file provided into both abl_a and abl_b

    Thanks for the guide maybe rephrase that part. I was super confused for a bit, would never overwrite something with a different name without being super clear.
    4
    Ok, so maybe you unlocked the bootloader, still not sure. But you didn't even root? How do you consider this a success then?

    Well, to answer the first part of your response here are a couple images (jpg type)

    And for the rest of your response, I am going to try to finish out this tutorial this morning. I can say this much in advance: I have found that once a phone has been bootloader unlocked, gaining root (whether it be by magisk, the ol' SuperSU, or whatever) becomes an eventuality of overwhelmingly high likelihood of success. I am saying 'high likelihood' only because I realize that there are never any absolute guarantees in XDA, and it's not a good idea to jinx yourself by getting overconfident. So I'm gonna try to get rooted here and keep my fingers crossed, but I personally can not recall ever hearing of a phone whose bootloader is unlocked, that couldn't be rooted.
    v50thinQ.jpg
    v50thinq2.jpg
    4
    can't access download mode. getting waring that the phone didn't pass safety check and keeps on booting to fastboot mode. any help will be greatly appreciated. was trying to root and this happened. bootloader is unlocked. can access fastboot but no download mode. V500N


    I had similar experience, it's just a lil tricky. I found it was easiest to boot phone completely, plug into computer, you hear the pc chime when phone is recognized, at that point hold the vol - and power until the pc chimes the disconnect, then immediately release the power button and tap the vol + repeatedly (usually 1-3 times) until the PC chimes connected, this all while still holding vol -. Practice how to hold the phone, release power and tap a few time and then it was easy.
    3
    It should since the abl used is from a g8x and it worked on my v50 sprint.. :)