Root & Install TWRP H830 (20A) (Nougat) LG G5. Hard Recowvery Method

[SnowFuhrer]

hi guys, i managed to flawlessly done the procedure with desired result (downgrade from 30c (oreo) to 20a (nougat) with anti-rollback v1 in it, and flashed the recovery with the twrp). thanks a bunch for the OP.

Then one question popped up. will the custom recovery survive if, let's say i'm going back to oreo (30c) via LGUP?


thanks again

Not if you flash the kdz.

 

[SnowFuhrer]

Managed to get to the first reboot. Then when I

getenforce

it shows enforcing. I ran these ADB commands off my phone as the computer was having problems. Anyone?

Edit: got that. Now I get unknown package when running

run-as exec ./recowvery-applypatch boot

 

[hightech316]

I am new to the LG scene. Thanks for this easy walk through .



hoping to contribute soon!

 

[h2five]

i'm stuck at this kindly help to go through

i am doing this on LG D830-20o , Android Version 7.0. Bootloader unlocked

 

[hightech316]

Managed to get to the first reboot. Then when I

getenforce

it shows enforcing. I ran these ADB commands off my phone as the computer was having problems. Anyone?

Edit: got that. Now I get unknown package when running

run-as exec ./recowvery-applypatch boot

Make sure all packages are within ADB dir, or use full DIR when running , "run-as exec C:\ADB\recowvery-applypatch " ( If that is where is it located of course, change it around to work with yours )

i am doing this on LG D830-20o , Android Version 7.0. Bootloader unlocked

What does "adb logcat" show ?

Perhaps check that USB Debugging enabled . ( I don't think you would of made it this far if it was not , still good to see )

Doesn't make a difference, But I use powershell. It has autocomplete and command history, making life easy.

I had moved all files required for this walk-through into the root of my ADB folder. Worked 1st time around on LG H-830 , Running 20A.

 

[h2five]

Thanks .. problem solved .. by downgrading. To 20a

Sent from my LG-D838 using Tapatalk

 

[SnowFuhrer]

Managed to get to the first reboot. Then when I it shows enforcing. I ran these ADB commands off my phone as the computer was having problems. Anyone?

Edit: got that. Now I get unknown package when running

Make sure all packages are within ADB dir, or use full DIR when running , "run-as exec C:\ADB\recowvery-applypatch " ( If that is where is it located of course, change it around to work with yours )



What does "adb logcat" show ?

Perhaps check that USB Debugging enabled . ( I don't think you would of made it this far if it was not , still good to see )

Doesn't make a difference, But I use powershell. It has autocomplete and command history, making life easy.

I had moved all files required for this walk-through into the root of my ADB folder. Worked 1st time around on LG H-830 , Running 20A.

Ok, thanks I got it working now. Hardest phone to root that I have seen yet.

 

[hightech316]

Ok, thanks I got it working now. Hardest phone to root that I have seen yet.

All these commands can be made into a bash script / shell script to automate .

I believe it has and posted under easyrecvvery

 

[Mattzees]

Where can I find this EasyRecovery? I have an H830 with Oreo, and I can't install TWRP or do anything with it.

 

[sxotty]

Hey I downgraded from 30c to 20a.
h83020a is software version. This is hanging at the logcat step.
Is there something I need to do timing wise to make this work?

C:\H830>adb push dirtycow /data/local/tmp
dirtycow: 1 file pushed.

C:\H830>adb push recowvery-applypatch /data/local/tmp
recowvery-applypatch: 1 file pushed.

C:\H830>
C:\H830>adb push recowvery-app_process64 /data/local/tmp
recowvery-app_process64: 1 file pushed. 0.6 MB/s (10200 bytes in 0.016s)

C:\H830>adb push recowvery-run-as /data/local/tmp
recowvery-run-as: 1 file pushed. 0.6 MB/s (10192 bytes in 0.016s)

C:\H830>adb shell
h1:/ $ cd /data/local/tmp
h1:/data/local/tmp $ chmod 0777 *
h1:/data/local/tmp $ ./dirtycow /system/bin/applypatch recowvery-applypatch
warning: new file size (18472) and file old size (165144) differ

size 165144

[*] mmap 0x72d8cd3000
[*] exploit (patch)
[*] currently 0x72d8cd3000=10102464c457f
[*] madvise = 0x72d8cd3000 165144
[*] madvise = 0 1048576
[*] /proc/self/mem 1367343104 1048576
[*] exploited 0x72d8cd3000=10102464c457f
h1:/data/local/tmp $ ./dirtycow /system/bin/app_process64 recowvery-app_process64
warning: new file size (10200) and file old size (18600) differ

size 18600


[*] mmap 0x7e69ec8000
[*] exploit (patch)
[*] currently 0x7e69ec8000=10102464c457f
[*] madvise = 0x7e69ec8000 18600
[*] madvise = 0 1048576
[*] /proc/self/mem -1971322880 1048576
[*] exploited 0x7e69ec8000=10102464c457f
"Screen turns white and says LG"
h1:/data/local/tmp $ exit

"I did this on my second try b/c nothing happened the first time"
C:\H830>adb devices
List of devices attached
LGH8302866de87  device

C:\H830>adb logcat -s recowvery

Nothing happens at all after this? It just stays on the white LG screen for at least 6 minutes that I timed. Eventually I gave up and pulled the battery out. Suggestions?

 

[sxotty]

figured it out

Figured it out
https://forum.xda-developers.com/showpost.php?p=78927719&postcount=1554


Old post below
-----------------

Where can I find this EasyRecovery? I have an H830 with Oreo, and I can't install TWRP or do anything with it.

https://forum.xda-developers.com/tmobile-lg-g5/how-to/guide-root-twrp-lg-g5-using-t3580264

Though it doesn't work. Someone there says something about antivirus. Maybe that is an issue. I dunno.
For me it said: files are missing download again

So I disable AV which might be risky, extracted again and ran again
Then it said "write permission failed"

I am nearing the point of giving up, but I really don't want to.

And after install a VM and trying in win7 I get the same result bleh so it has to be the phone.

Unlocked

 

[PjLyTam]

$ cd /data/local/tmp
/system/bin/sh: $: not found

 

[Mattzees]

If you search my posts, a kind user posted the solution, which I reposted elsewhere. I don't know how to view my posts, or I'd link to it directly for you.

 

[frohro]

How did you get around the enforcing?

Managed to get to the first reboot. Then when I

getenforce

it shows enforcing. I ran these ADB commands off my phone as the computer was having problems. Anyone?

Edit: got that. Now I get unknown package when running

run-as exec ./recowvery-applypatch boot

How did you get that? I have the same issue. It always says:

h1:/ $ getenforce
Enforcing

When I reboot recovery, I get this screen saying "Your device is corrupt. It cannot be trusted and will not boot." It does finally reboot, but in enforcing mode.
I tried a factory reset before everything, but nothing seems to change this.

Any suggestions?

Thanks,
Rob

---------- Post added at 04:49 AM ---------- Previous post was at 04:25 AM ----------

Managed to get to the first reboot. Then when I

getenforce

it shows enforcing. I ran these ADB commands off my phone as the computer was having problems. Anyone?

Edit: got that. Now I get unknown package when running

run-as exec ./recowvery-applypatch boot

How did you get that? I have the same issue. It always says:

h1:/ $ getenforce
Enforcing

When I reboot recovery, I get this screen saying "Your device is corrupt. It cannot be trusted and will not boot." It does finally reboot, but in enforcing mode.
I tried a factory reset before everything, but nothing seems to change this.

Any suggestions?

Thanks,
Rob

Okay, I figured it out. You need to fastboot oem unlock first, before doing this. The author of this method tried the "easy" way first, and did that already. See this page.

 

[SnowFuhrer]

Managed to get to the first reboot. Then when I it shows enforcing. I ran these ADB commands off my phone as the computer was having problems. Anyone?

Edit: got that. Now I get unknown package when running

How did you get that? I have the same issue. It always says:

When I reboot recovery, I get this screen saying "Your device is corrupt. It cannot be trusted and will not boot." It does finally reboot, but in enforcing mode.
I tried a factory reset before everything, but nothing seems to change this.

Any suggestions?

Thanks,
Rob

---------- Post added at 04:49 AM ---------- Previous post was at 04:25 AM ----------

Managed to get to the first reboot. Then when I it shows enforcing. I ran these ADB commands off my phone as the computer was having problems. Anyone?

Edit: got that. Now I get unknown package when running

How did you get that? I have the same issue. It always says:

When I reboot recovery, I get this screen saying "Your device is corrupt. It cannot be trusted and will not boot." It does finally reboot, but in enforcing mode.
I tried a factory reset before everything, but nothing seems to change this.

Any suggestions?

Thanks,
Rob

Okay, I figured it out. You need to fastboot oem unlock first, before doing this. The author of this method tried the "easy" way first, and did that already. See this page.

I don't even remember how I fixed it. I think I was running adb from my phone via otg cable and when I switched to PC it worked. But I don't know.

 

[stephan6]

H83020A decryption unsuccessful

pls i need help. my h83020a have been stressing the hell out of me. i have been on this phone for a month now trying to root.
it gives me decryption unseccessful no matter what i do. pls i need serious help. thanks in advance

 

[TheMadScientist]

I don't even remember how I fixed it. I think I was running adb from my phone via otg cable and when I switched to PC it worked. But I don't know.

By chance do you know if this method is still viable. I'm picking one up on a decent deal never had a T-mobile one only sprint and Verizon. At the time there was no root at all for them

 

[SnowFuhrer]

By chance do you know if this method is still viable. I'm picking one up on a decent deal never had a T-mobile one only sprint and Verizon. At the time there was no root at all for them

I did mine a couple months ago so it should still be good.

 

[TheMadScientist]

I did mine a couple months ago so it should still be good.

H
I got shafted ??? my device was Sim unlocked and working good. When I flashed the 10a it relocked the device. Which is no good to me.
Now I'm scared to unlock it that a factory reset or firmware or rom flash may undo it again.
I saw where someone listed a nearly Instant cheap service that I can do right from my pc tmobile claims they submitted a ticket even though I have no account with them. They claim

 

[SnowFuhrer]

H
I got shafted ??? my device was Sim unlocked and working good. When I flashed the 10a it relocked the device. Which is no good to me.
Now I'm scared to unlock it that a factory reset or firmware or rom flash may undo it again.
I saw where someone listed a nearly Instant cheap service that I can do right from my pc tmobile claims they submitted a ticket even though I have no account with them. They claim

Aww too bad. I got my g5 on a deal and have never had a sim card in it so didn't have any problems. Does sim unlock not have to do with imei? I don't know anything about it tbh