• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

V60 Bootloader Unlock and Magisk Root

Search This thread

sheshtas

New member
Dec 1, 2021
3
1
This was my V60 last week same issue.,what I've done is went back again in edl, done everything from scratch ( delete ftm, sid_a sid_b etc) then boot into download and eventually it worked on 4th attempt..
How did you get beck to edl? In my case, phone only bootloops with security failure issue - or, if connected via usb, allows to enter the download mode. Did not manage to get into edl, no matter what I've tried..
 

Karol75

Senior Member
Jan 3, 2016
72
20
47
Bridport
LG V60 ThinQ
How did you get beck to edl? In my case, phone only bootloops with security failure issue - or, if connected via usb, allows to enter the download mode. Did not manage to get into edl, no matter what I've tried.
Just hold volume down and power whilst phone connected to the PC,as soon as you hear it disconnect,rock the volume up button in quick succession. Don't worry if it fails once. Give it several tries , It will boot in edl eventually
 

sheshtas

New member
Dec 1, 2021
3
1
Just hold volume down and power whilst phone connected to the PC,as soon as you hear it disconnect,rock the volume up button in quick succession. Don't worry if it fails once. Give it several tries , It will boot in edl eventually
Thank you! Played some time with it, but finally managed to get into EDL (had to power off the phone from download mode first). Will try to recover the phone in the evening :)
 
  • Like
Reactions: Karol75

Karol75

Senior Member
Jan 3, 2016
72
20
47
Bridport
LG V60 ThinQ
Yes and don't forget ,do not let the phone to boot after you finished with edl. Hold volume down and power unit you hear the phone disconnects,as soon as it does , let go of them and press and hold volume up to go straight to downloaded mode .
 

andamiro00

Member
Dec 1, 2021
32
17
Please understand if the sentence is awkward because it was written using a translator.

Thank you for telling me how to unlock the bootloader of the LG v60 device. There was an error during cross-flashing, so I'm asking this question.

I tried cross flash. An error occurred as shown in the picture. Unlike other lgv60, my v60 doesn't have several partitions.
"operatorlogging" ,"eri", "carrier", "persdata""OP_a" ,"OP_b"

My v60 seems to be an error caused by a lack of partitions, but did you solve such an error?
 

Attachments

  • 11212121212.JPG
    11212121212.JPG
    54.3 KB · Views: 64

mustave

Member
Nov 18, 2021
40
2
Dear friends need you help. I bricked my phone. only 9008 is work. need files for return life. for att. HELP.SOS i.e. only 9008 mode is work
 

deathglass

Member
Nov 27, 2021
11
1
My v60 is bricked after changing ABL_A and ABL_B for the engineering bootloader. It's stuck in 9008 EDL mode; anyone know how to fix? Loading the backup ABL files didn't work.
 

hooutoo

Senior Member
Apr 17, 2009
415
45
Ft. Lauderdale
I have a qfil problem, just wondering if anyone has seen this error before.

Download Fail:FireHose Fail:FHLoader Fail:The system cannot find the file specified

This error comes after everything has been setup correctly. I point it to the firehose listed on 1st post. I've used all of this dozens of times but somehow now all of a sudden I'm getting the error above???


Problem solve. For future reference QFIL must run from Qpst which is to say: Use the QFIL under the Qpst entry of windows programs.
 
Last edited:

Eredian

New member
Dec 11, 2021
1
0
I completed this guide and my T-mobile V60 is rooted but I have one issue, The WIFI does not turn on, just cellular data works. Any idea what the issue is?
 

garyyo

New member
Jan 13, 2016
1
0
I completed this guide and my T-mobile V60 is rooted but I have one issue, The WIFI does not turn on, just cellular data works. Any idea what the issue is?
Yeah, I had the exact same problem. You likely messed up the rooting step because you were on the wrong A/B partition when you extracted and patched you boot image. You were likely on the B partition and used your boot_a.img. The correct way to solve it is to have had a backup of your boot_b.img but if you followed the guide exactly you overwrote that. With that backup you can just patch that with magisk and use it instead of the boot_a.img.

The way I solved it is to relock your bootloader, restore all of your backups (your backed up boot_a.img, abl_a, and abl_b) then update your phone to get back to good B partition (assuming you did an OTA update before, if not you should still be rolled back one update). Then redo all of the steps of flashing the engineering bootloader (which partition you are on doesn't matter for this one), then apply root but to the correct partition (it will say which one you are in when in fastboot mode) instead of just applying it to A/B.

This does mean you have to do a factory wipe of the phone though. I am also not sure if this is the best way to accomplish this, but it worked for me. Might want to read up on A/B partitioning and related topics as not understanding them is what led me to making this mistake in the first place.
 

neonfishingrod

New member
May 18, 2020
2
0
worked on at&t v600vm, but wifi doesnt work and ui keeps freezing/crashing

edit: anyone having a qfil error, the qpst wizard will install it for you. make sure youre using that build and not a standalone
 
Last edited:

neonfishingrod

New member
May 18, 2020
2
0
re-flashed boot_a and followed instructions for magisk again and worked fine, no problems! now we just wait for the lineage build to drop
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    I didn't flash super or op_a/b in QFIL to unbrick the phone, only in download mode, I used LGUP to cross-flash the KDZ with all partitions except sid_a/b and abl_a/b just like documented in this thread.
    Because I'm not rooted, neither bootloader unlock, when I cross flash, I only deselect sid_a and sid_b in LG up.
    2
    This is what I done to get rid of the NT-CODE error + having mobile data after editing ftm .

    In QFIL find ftm.bin, manage partition data / read data. find the folder where the backup partition was saved .

    In HxD editor open the backed up ftm partition .

    Find offset 00014000 right click ,pastewrite your NT-code I did "1","FFF,FFF,FFFFFFFF,FFFFFFFF,11" (for Europe)

    Flash edited ftm back with qfil,reboot ,


    Extract from your kdz (or from your FW with QFIL ) modem_a .

    With 7zip, navigate to (modem_a\image\modem_pr\mcfg\configs\mcfg_sw\generic\Korea\ROW\Commercial\) extract mcfg_sw.mbn

    Enter Hidden menu / SVC/ choose Field Test, then LTE Data Test, and change the Tethering Mode from Android to QMICM.

    Usb debugging must be off!

    Open PDC tool in QPST,

    Load the extracted mcfg_sw.mbn

    after that right click on ROW_commercial, setselectedconfig-sub0, it will have status "pending"

    press activate,

    reboot or reset Network Settings , mobile data should work now after every reboot or factory reset .

    (thanks jdlfjk xda)

    P.S.- DO NOT DELETE any of the existent profiles in the menu,done that and IMEI was gone!
    1
    Anyone willing to upload their partition dumps so I can try to debrick my tmobile variant v60?

    I tried to go back to stock after rooting my v60 by flashing my backup abl partitions and now it is stuck on EDL mode. Maybe something else is corrupted on my device. Thanks in advance!
    1
    so you went from ATT to Tmobile?
    No, I decided to go from ATT to this V600EA20k_00_1112.kdz because I know with this one mobile data works out-of-the-box.
    1
    was that the only benefit using that international firmware?
    Well, it has less bloatware apps and they can be uninstalled (fackbook, booking.com etc) and since I don't live in the US so I don't see there is any good reason to flash a tmobile or verizon FW.
  • 13
    Earlier today I was alerted to https://www.cnblogs.com/yanhua-tj/p/15525593.html which has the actual firehose and steps to unlock! However it seems to be in Simplified Chinese so I'll translate it here for you.

    The firehose is attached below.

    DISCLAIMER: I am not responsible for any damages this may cause as I am merely translating the guide, I am not responsible for you bricking your device because of a missed step so read carefully,

    Also, Please backup your data beforehand as this does wipe the phone. Also please note that if you are on android 11 LG Backup will not work after unlocking, neither does the LG Bridge tool.

    Requirements:
    1. Get QPST Here
    2. Get the FIrehose Here
    3. Engineering Bootloader Here
    4. Adb and Fastboot Here
    5. Qualcomm Drivers Here (When installing make sure to select wwan)
    6. Frp with oem unlock bit set for Verizon Here Not for demo units!
    7. Slight knowledge of the command line
    8. A Brain
    Steps:
    1. If you already have it unhidden go to Developer Options under Settings -> System and enable OEM Unlock as well as USB Debugging. If you don't see Developer Options go to Settings => System => About Phone => Software Information and tap Build Number until it either asks you for your password or says you are a developer at the bottom. Verizon Users: You will not see the oem unlock option, we will fix this later in this guide.
    2. 2) Get it into 9008 Mode: (This may take several tries)
      1. Make sure you are connected to your computer via USB.
      2. Hold Volume Down and Power until it shuts off
      3. Now here's the tricky part, as soon as the screen turns off, immediately start tapping volume up quickly, but do not let go of volume down and power, if you did it successfully you will see your screen is off but it appears either in Device Manager or Windows plays the Device Connected sound.
    3. Open and Configure QFIL as shown below:
      20211108182212.png
    4. After that click Browse and select the Firehose you downloaded earlier
      20211108173502.png
    5. Next go to the Tools menu at the top then select Partition Manager (If this errors please reboot back into edl using the steps mentioned above!)
    6. 20211108173843.png
    7. After that wait for QFIL to connect then a new window will pop up. FInd abl_a and abl_b, right click on each and click Manage Partition. First thing you want to do for each is click Read Data. This will back them up in case of anything going wrong. QFIl will tell you where it stores them. Then for each click Load Image and select the Engineering Bootloader you downloaded from before.
      20211108174205.png
      20211108174320.png
    8. Once you get that done for both abl_a and abl_b click close on both the Raw Data Manager and Partition Manager and wait for QFIL to say Finish Reset to EDL in the logs at the bottom.
    9. Now it's time to get into Fastboot.
      1. Press and Hold Power and Volume Down for 9 seconds
      2. Once you either see it disappear from QFIL or you hear it disconnect from your PC, let go of power, until you see Fastboot Mode on your Phone's screen.
      3. Open the command prompt on your computer.
    10. Once it's in fastboot verify if fastboot can see it by doing fastboot devices, if it can't see it troubleshoot here:
      1. Check your USB Connection
      2. Double check you installed the adb and fastboot stuff from earlier in the post
      3. There may be a chance WIndows doesn't recognize it properly. So follow these steps:
        1. Open Device Manager by doing Windows + X and clicking Device Manager
        2. There may be an already open row that says Unknown Devies
        3. Right click on android and select Update Drivers
        4. Select Browse my computer for drivers
        5. Select Let me pick from a list of available drivers
        6. Select Android Device
        7. Select Android Bootloader Interface
        8. Click Ok on the pop up
        9. Once that finishes double check the phone can be seen in fastboot devices
    11. Now here comes the fun part, unlocking! Please make sure you have your data backed up.
      1. If you are on verizon (and it's not a demo unit)
        1. Make sure you downloaded the file from above for the unlocked frp
        2. Do fastboot flash frp frp.img
        3. Do fastboot reboot and let it boot into android once, no need to set it up
        4. Reboot back to Fastboot using step 9
        5. Do fastboot oem unlock
        6. Select Unlock the Bootloader using volume down and power, your phone will wipe and reboot
      2. On any other variant
        1. Do fastboot oem unlock
        2. Select Unlock the Bootloader, your phone will wipe and reboot
    12. And that's it! Rooting guide will be on post 3.
    If you have any questions or feel like this is too complicated, please don't hesitate to contact us {Mod edit}
    7
    Rooting with Magisk:
    You need to have already done the unlock mentioned above
    1. Go back to the guide and go all the way to the Partition Manager part, but don't flash anything.
    2. Now find and right click boot_a, click Manage Partition Data, and click Read Data.
    3. Wait for that to finish, when it does QFIL will tell you where it stored it.
    4. Grab the file and place it somewhere as a backup.
    5. Rename it to something like boot_a.img
    6. Either use an existing device with Magisk or restart your device and install the magisk app from Here (make sure to download the Magisk-v2x.x.apk)
    7. Transfer the image you got to your phone in whatever method you'd like.
    8. In the Magisk App where it says Magisk, click Install, then choose Select and Patch a File
    9. Wait for that to finish, after that transfer the modified image back to wherever you want to keep it. To make it easier rename it to something like MagiskPatchedBoot.img
    10. Get into fastboot by Either:
      1. Shutting the phone off, and holding volume down while plugging in the usb cable
      2. Do adb reboot bootloader if you have adb debugging setup.
    11. Now in the directory of your patched image do fastboot flash boot_a MagiskPatchedBoot.img and fastboot flash boot_b MagiskPatchedImage.img
    12. Now do fastboot reboot and you're golden!
    4
    Hey! I'm in the same situation as you, carrier unlocked ATT ebayed to Europe, stuck on A10. Were you be able to crossflash? If so, i would thank you deeply for a quick rundown on the steps :)
    1. Download and install QPST, when installed launch it and select the firehose and Nand type e.g. UFS.
    2. Download and install this LGUP from here: . In the installer select "Install LG Drivers"
    3. Put phone into edl mode, here is how: Hold Vol- and pwr, when the screen turns black keep holding them and Repeatedly press vol+ You will see "Qualcomm HS-USB QDLoader 9008" under "Ports (COM & LPT)" in device manager when it is in edl. If the screen shows anything after reboot, instantly retry again.

    4. When it is in EDL Mode, open partition manager and make a backup of these partitions "FTM, OP_A OP_B, MODEM_A MODEM_B, SID_A SID_B.
    5. After backing up, erase the same partitions "FTM, OP_A OP_B, MODEM_A MODEM_B, SID_A SID_B.
    6. Now after erasing it is sort of important to not let it boot to android, and instead boot to download mode. Here is how: force reboot with vol- and pwr button. As soon as it disconnects from windows, Release the Vol- and Power buttons and hold Vol+ to get into Download Mode.

    7. When it enters Download mode, open LGUP and select partition DL. Select your favourite V60 KDZ too.
    8. 8. Click on start, then it will prompt you to select partitions that can be flashed, select every partition EXCEPT "SID_A SID_B AND ABL_A ABL_B" then confirm.
      (NOTE: DO NOT CLICK "SELECT ALL" IT IS BUGGED AND WILL FLASH ALL PARTITIONS, EVEN IF UNSELECTED AFTER)
    9. Let it install, after that you should be done, hidden menu won't work but you can install this apk to be able to enter hidden menu and fix the fingerprint on an unlocked bootloader.

      Written by: Leronex
    3
    Misc Fixes:

    1. Open the dialer and dial: ` *#546368#*600# ` | Verizon (V600VM): ##228378 (+ send)
    2. SVC Menu > Handprint > HandID Logging = ON | ON VERIZON SKIP THIS STEP
    3. Device Test > SAAT > Service Menu – Manual test > Optical Fingerprint test Complete the test and when a green circle shows tap it, when you see a button “pass” click it. At the end it should fail so just click the “fail” button when there is no “pass” button anymore. Start the test by clicking "start", then hold the green circle with your finger till the test finishes. On the last test it will fail so just click on "fail".
    4. Repeat 3 times and try adding a fingerprint, if fingerprint still does not work just restart and retry again.
    1. Download system systemrw_1.31d_BUNDLE.zip from https://forum.xda-developers.com/t/script-android-10-universal-mount-system-read-write-r-w.4247311/
    2. Place folder systemrw_1.31d in /data/local/tmp on the phone
    3. Place sysrw_repair_v1.31d on your linux machine
    4. Go to adb shell, su and then do "chmod +x /data/local/tmp/systemrw_1.31d/systemrw.sh"
    5. Then in adb shell do cd /data/local/tmp/systemrw_1.31d and do ./systemrw.sh size=15 or 20 and wait till its done
    6. Go to the linux machine and cd to sysrw_repair_v1.31d from step 3
    7. Connect adb with your phone and make sure to not accidentally disconnect it (This will take a while)
    8. In the sysrw_repair_v1.31d directory, do sudo ./sysrw_repair.sh and make sure your Linux machine has at least 25gb Storage space, this process will take more or less 30 mins depending on how fast the machine is
    When its done it should start flashing in fastboot automatically.
    Make sure to follow the guide to make /system rw or else you will end up in a non bootable system!

    1. Add these lines below to your build.prop (First set permissions on the build.prop so you can write it)

    Code:
    Debug Options
    persist.dbg.ims_volte_enable=1
    persist.dbg.volte_avail_ovr=1
    persist.dbg.vt_avail_ovr=1
    persist.dbg.wfc_avail_ovr=1
    
    # Radio Options
    persist.radio.rat_on=combine
    persist.radio.data_ltd_sys_ind=1
    persist.radio.data_con_rprt=1
    persist.radio.calls.on.ims=1

    Make sure to set the Permissions back to chmod 600
    2. Reboot, go to settings > Networks > Calls > Enable WIFI Calling
    3. If it won't turn on by itself you might need to enter the Service menu and go to SVC Menu > VoWIFI > WIFI Calling Toggle = 1
    Credit: Leronex (Discord), Leronex_1 (XDA)
    You must make /system RW using the guide above

    Part 1:

    1. adb shell, pm uninstall -k --user 0 com.lge.rctprovider
    2. adb reboot bootloader, Fastboot erase rct
    Reboot to System
    3. adb shell, pm uninstall -k --user 0 com.lge.srtc
    4. Edit #/system_ext/etc/init/init.lge.system_ext.service.rc and remove this:
    Code:
    ########################################
    # LG RCT(Rooting Check Tool)
    ########################################
    service rctd /system_ext/bin/rctd
    class late_start
    user root
    group root
    seclabel u:r:rctd:s0
    )

    5. Remove .txt extension and copy back to original place (Keep old permissions on file: rw-r--r--) and reboot

    Now the RCT Service is stopped.
    --------------------------------
    Part 2:

    1. Delete /system/system_ext/app/RctProvider Folder and /system/system_ext/bin/rctd file
    2. Delete /mnt/Product/Persist-LG/RCT Folder

    Done, how to check if it is disabled? "Adb shell", "su" and "getprop | grep rct". If it shows nothing as output that means the service is not running. After that check the service menu *#546368#*600# > SVC Menu > LG RCT (Has to say Disabled)
    Code:
    adb shell pm uninstall -k --user 0 com.lge.lgdmsclient
    On TMO After 20j:
    Code:
    adb shell pm uninstall -k --user 0 com.lge.android.atservice
    adb shell pm uninstall -k --user 0 com.lge.gdec.client
    adb shell pm uninstall -k --user 0 com.lge.lgfota.permission
    adb shell pm disable --user 0 com.lge.pickme
    Code:
    adb shell pm disable --user 0 com.lge.phonemanagement
    1. Download and install QPST, when installed launch it and select the firehose and Nand type e.g. UFS.

    2. Download and install this LGUP from here: https://drive.google.com/file/d/1VxecFNYK2Lr7w1HVg-mNIGEoVa8CSHFt/view?usp=sharing . In the installer select "Install LG Drivers"

    3. Put phone into edl mode, here is how: Hold Vol- and pwr, when the screen turns black keep holding them and Repeatedly press vol+ You will see "Qualcomm HS-USB QDLoader 9008" under "Ports (COM & LPT)" in device manager when it is in edl. If the screen shows anything after reboot, instantly retry again.

    4. When it is in EDL Mode, open partition manager and make a backup of these partitions "FTM, OP_A OP_B, MODEM_A MODEM_B, SID_A SID_B.

    5. After backing up, erase the same partitions "FTM, OP_A OP_B, MODEM_A MODEM_B, SID_A SID_B.

    6. Now after erasing it is sort of important to not let it boot to android, and instead boot to download mode. Here is how: force reboot with vol- and pwr button. As soon as it disconnects from windows, Release the Vol- and Power buttons and hold Vol+ to get into Download Mode.

    7. When it enters Download mode, open LGUP and select partition DL. Select your favourite V60 KDZ too.

    8. Click on start, then it will prompt you to select partitions that can be flashed, select every partition EXCEPT "SID_A SID_B AND ABL_A ABL_B" then confirm. (NOTE: DO NOT CLICK "SELECT ALL" IT IS BUGGED AND WILL FLASH ALL PARTITIONS, EVEN IF UNSELECTED AFTER)

    9. Let it install, after that you should be done, hidden menu won't work but you can install this apk to be able to enter hidden menu and fix the fingerprint on an unlocked bootloader. https://drive.google.com/file/d/1g-7BQ_Jlmi-5tpbMg383LaiYr5YjTmqQ/view?usp=drivesdk
    3
    How you did crosh-flash for att? Need instructions pls
    One question in advance:

    If your device has a SIM lock, what I'm going to write here might not work for you.
    But more like a refusal of the LGUP tool to do the flash shouldn't actually happen.

    As a first step you should select yourself in the following menu:

    * # 546368 # * 600 # ---> SVC Menu ---> MID Info

    Save or write down the data specified there, especially the data under "MID Values".

    Furthermore, write down the values of the IMPL and FUSG

    I'm assuming that you have the right firmware for cross-flattening as a kdz file. I did several steps ...
    First from AT&T to Verizon, then from Verizon to TMO and then from TMO to EA (EUR). I did it for no particular reason, I just tried it out.
    I used LGUPCMD as a tool (see appendix). In the archive you will find detailed instructions on how to use the tool. I hope you know how to work with command line ...

    Before you get started, 2 more questions:

    Which software version do you have now?
    Which software version do you want to end up with?

    With Crossflash, I would not update from Android 10 to 11 straight away, but do it in a second flash as an upgrade.

    But then you need the GUI version of LGUP (also in the appendix).

    You will most likely get an NT code error at some point, don't get nervous, you can get rid of it relatively easily, preferably in Android 10 ...