V60 Bootloader Unlock and Magisk Root

[crimsonrommer]

Earlier today I was alerted to https://www.cnblogs.com/yanhua-tj/p/15525593.html which has the actual firehose and steps to unlock! However it seems to be in Simplified Chinese so I'll translate it here for you.

The firehose is attached below.

DISCLAIMER: I am not responsible for any damages this may cause as I am merely translating the guide, I am not responsible for you bricking your device because of a missed step so read carefully,

Also, Please backup your data beforehand as this does wipe the phone. Also please note that if you are on android 11 LG Backup will not work after unlocking, neither does the LG Bridge tool.

***IF YOU WANT ANDROID 12, UPDATE BEFORE ROOTING, I HAVE CONFIRMED IT WORKS FINE***

Requirements:

1. Get QPST Here
2. Get the FIrehose Here
3. Engineering Bootloader Here
4. Adb and Fastboot Here
5. Qualcomm Drivers Here (When installing make sure to select wwan)
6. Frp with oem unlock bit set for Verizon Here Not for demo units!
7. Slight knowledge of the command line
8. A Brain

Steps:

1. If you already have it unhidden go to Developer Options under Settings -> System and enable OEM Unlock as well as USB Debugging. If you don't see Developer Options go to Settings => System => About Phone => Software Information and tap Build Number until it either asks you for your password or says you are a developer at the bottom. Verizon Users: You will not see the oem unlock option, we will fix this later in this guide.
2. 2) Get it into 9008 Mode: (This may take several tries)
   1. Make sure you are connected to your computer via USB.
   2. Hold Volume Down and Power until it shuts off
   3. Now here's the tricky part, as soon as the screen turns off, immediately start tapping volume up quickly, but do not let go of volume down and power, if you did it successfully you will see your screen is off but it appears either in Device Manager or Windows plays the Device Connected sound.
3. Open and Configure QFIL as shown below:
   
4. After that click Browse and select the Firehose you downloaded earlier
   
5. Next go to the Tools menu at the top then select Partition Manager (If this errors please reboot back into edl using the steps mentioned above!)
6. 
7. After that wait for QFIL to connect then a new window will pop up. FInd abl_a and abl_b, right click on each and click Manage Partition. First thing you want to do for each is click Read Data. This will back them up in case of anything going wrong. QFIl will tell you where it stores them. Then for each click Load Image and select the Engineering Bootloader you downloaded from before.
   
   
8. Once you get that done for both abl_a and abl_b click close on both the Raw Data Manager and Partition Manager and wait for QFIL to say Finish Reset to EDL in the logs at the bottom.
9. Now it's time to get into Fastboot.
   1. Press and Hold Power and Volume Down for 9 seconds
   2. Once you either see it disappear from QFIL or you hear it disconnect from your PC, let go of power, until you see Fastboot Mode on your Phone's screen.
   3. Open the command prompt on your computer.
10. Once it's in fastboot verify if fastboot can see it by doing fastboot devices, if it can't see it troubleshoot here:
    1. Check your USB Connection
    2. Double check you installed the adb and fastboot stuff from earlier in the post
    3. There may be a chance WIndows doesn't recognize it properly. So follow these steps:
       1. Open Device Manager by doing Windows + X and clicking Device Manager
       2. There may be an already open row that says Unknown Devies
       3. Right click on android and select Update Drivers
       4. Select Browse my computer for drivers
       5. Select Let me pick from a list of available drivers
       6. Select Android Device
       7. Select Android Bootloader Interface
       8. Click Ok on the pop up
       9. Once that finishes double check the phone can be seen in fastboot devices
11. Now here comes the fun part, unlocking! Please make sure you have your data backed up.
    1. If you are on verizon (and it's not a demo unit)
       1. Make sure you downloaded the file from above for the unlocked frp
       2. Do fastboot flash frp frp.img
       3. Do fastboot reboot and let it boot into android once, no need to set it up
       4. Reboot back to Fastboot using step 9
       5. Do fastboot oem unlock
       6. Select Unlock the Bootloader using volume down and power, your phone will wipe and reboot
    2. On any other variant
       1. Do fastboot oem unlock
       2. Select Unlock the Bootloader, your phone will wipe and reboot
12. And that's it! Rooting guide will be on post 3.

If you have any questions or feel like this is too complicated, please don't hesitate to contact us {Mod edit}

 

[crimsonrommer]

Rooting with Magisk:
You need to have already done the unlock mentioned above

1. Go back to the guide and go all the way to the Partition Manager part, but don't flash anything.
2. Now find and right click boot_a, click Manage Partition Data, and click Read Data do the same for boot_b.
3. Wait for that to finish, when it does QFIL will tell you where it stored it.
4. Grab the file and place it somewhere as a backup.
5. Rename it to something like boot_a.img and boot_b.img
6. Either use an existing device with Magisk or restart your device and install the magisk app from Here (make sure to download the Magisk-v2x.x.apk)
7. Transfer the images you got to your phone in whatever method you'd like.
8. In the Magisk App where it says Magisk, click Install, then choose Select and Patch a File. Make sure to patch both boot images separately!
9. Wait for that to finish, after that transfer the modified image back to wherever you want to keep it. To make it easier rename it to something like MagiskPatchedBoot_a.img and MagiskPatchedBoot_b.img
10. Get into fastboot by Either:
    1. Shutting the phone off, and holding volume down while plugging in the usb cable
    2. Do adb reboot bootloader if you have adb debugging setup.
11. Now in the directory of your patched image do fastboot flash boot_a MagiskPatchedBoot_a.img and fastboot flash boot_b MagiskPatchedImage_b.img
12. Now do fastboot reboot and you're golden!

 

[crimsonrommer]

Misc Fixes:

Spoiler: Getting back the Fingerprint scanner after unlock NOT REQUIRED ON ANDROID 12 (Credits to Leronex_1)

1. Open the dialer and dial: ` *#546368#*600# ` | Verizon (V600VM): ##228378 (+ send)
2. SVC Menu > Handprint > HandID Logging = ON | ON VERIZON SKIP THIS STEP
3. Device Test > SAAT > Service Menu – Manual test > Optical Fingerprint test Complete the test and when a green circle shows tap it, when you see a button “pass” click it. At the end it should fail so just click the “fail” button when there is no “pass” button anymore. Start the test by clicking "start", then hold the green circle with your finger till the test finishes. On the last test it will fail so just click on "fail".
4. Repeat 3 times and try adding a fingerprint, if fingerprint still does not work just restart and retry again.

Spoiler: Making /system RW (Credits to Leronex_1 and lebigmac)

1. Download system systemrw_1.31d_BUNDLE.zip from https://xdaforums.com/t/script-android-10-universal-mount-system-read-write-r-w.4247311/
2. Place folder systemrw_1.31d in /data/local/tmp on the phone
3. Place sysrw_repair_v1.31d on your linux machine
4. Go to adb shell, su and then do "chmod +x /data/local/tmp/systemrw_1.31d/systemrw.sh"
5. Then in adb shell do cd /data/local/tmp/systemrw_1.31d and do ./systemrw.sh size=15 or 20 and wait till its done
6. Go to the linux machine and cd to sysrw_repair_v1.31d from step 3
7. Connect adb with your phone and make sure to not accidentally disconnect it (This will take a while)
8. In the sysrw_repair_v1.31d directory, do sudo ./sysrw_repair.sh and make sure your Linux machine has at least 25gb Storage space, this process will take more or less 30 mins depending on how fast the machine is

When its done it should start flashing in fastboot automatically.

Spoiler: Enabling VoWifi on V600EA (Credits to Leronex_1)

Make sure to follow the guide to make /system rw or else you will end up in a non bootable system!

1. Add these lines below to your build.prop (First set permissions on the build.prop so you can write it)

Debug Options
persist.dbg.ims_volte_enable=1
persist.dbg.volte_avail_ovr=1
persist.dbg.vt_avail_ovr=1
persist.dbg.wfc_avail_ovr=1

# Radio Options
persist.radio.rat_on=combine
persist.radio.data_ltd_sys_ind=1
persist.radio.data_con_rprt=1
persist.radio.calls.on.ims=1

Make sure to set the Permissions back to chmod 600
2. Reboot, go to settings > Networks > Calls > Enable WIFI Calling
3. If it won't turn on by itself you might need to enter the Service menu and go to SVC Menu > VoWIFI > WIFI Calling Toggle = 1
Credit: Leronex (Discord), Leronex_1 (XDA)

Spoiler: Disabling rct (Credits to null-dev)

You must make /system RW using the guide above

1. adb shell, pm uninstall -k --user 0 com.lge.rctprovider
2. adb reboot bootloader, fastboot erase rct, Reboot to System
3. adb shell, pm uninstall -k --user 0 com.lge.srtc
4. Download and install the Magisk module: https://github.com/null-dev/lg-v60-rct-disable-magisk/raw/master/lg-v60-rct-disable-magisk.zip, then reboot the phone.
5. Delete /mnt/product/persist-lg/rct folder

Done, how to check if it is disabled? "Adb shell", "su" and "getprop | grep rct". If it shows nothing as output that means the service is not running. After that check the service menu *#546368#*600# > SVC Menu > LG RCT (Has to say Disabled)

Spoiler: Disable OTA Updates (Credits to Leronex_1)

adb shell pm uninstall -k --user 0 com.lge.lgdmsclient

On TMO After 20j:

adb shell pm uninstall -k --user 0 com.lge.android.atservice
adb shell pm uninstall -k --user 0 com.lge.gdec.client
adb shell pm uninstall -k --user 0 com.lge.lgfota.permission
adb shell pm disable --user 0 com.lge.pickme

Spoiler: Disable Smart doctor to save battery (Credits to Leronex_1)

adb shell pm disable --user 0 com.lge.phonemanagement

Spoiler: Crossflashing Guide (Credits to Leronex_1)

1. Download and install QPST, when installed launch it and select the firehose and Nand type e.g. UFS.

2. Download and install this LGUP from here: https://drive.google.com/file/d/1VxecFNYK2Lr7w1HVg-mNIGEoVa8CSHFt/view?usp=sharing . In the installer select "Install LG Drivers"

3. Put phone into edl mode, here is how: Hold Vol- and pwr, when the screen turns black keep holding them and Repeatedly press vol+ You will see "Qualcomm HS-USB QDLoader 9008" under "Ports (COM & LPT)" in device manager when it is in edl. If the screen shows anything after reboot, instantly retry again.

4. When it is in EDL Mode, open partition manager and make a backup of these partitions "FTM, OP_A OP_B, MODEM_A MODEM_B, SID_A SID_B.

5. After backing up, erase the same partitions "FTM, OP_A OP_B, MODEM_A MODEM_B, SID_A SID_B.

6. Now after erasing it is sort of important to not let it boot to android, and instead boot to download mode. Here is how: force reboot with vol- and pwr button. As soon as it disconnects from windows, Release the Vol- and Power buttons and hold Vol+ to get into Download Mode.

7. When it enters Download mode, open LGUP and select partition DL. Select your favourite V60 KDZ too.

8. Click on start, then it will prompt you to select partitions that can be flashed, select every partition EXCEPT "SID_A SID_B AND ABL_A ABL_B" then confirm. (NOTE: DO NOT CLICK "SELECT ALL" IT IS BUGGED AND WILL FLASH ALL PARTITIONS, EVEN IF UNSELECTED AFTER)

9. Let it install, after that you should be done, hidden menu won't work but you can install this apk to be able to enter hidden menu and fix the fingerprint on an unlocked bootloader. https://drive.google.com/file/d/1g-7BQ_Jlmi-5tpbMg383LaiYr5YjTmqQ/view?usp=drivesdk

 

[crimsonrommer]

Reserved Post #3

 

[guosasipo]

looks good

 

[Raify4]

v60 demo unlock boot and root
THX!

 

[crimsonrommer]

v60 demo unlock boot and root
THX!

This doesn't work for the demo I should have clarified

 

[Raify4]

This doesn't work for the demo I should have clarified

I tried on my demo unit and it worked

 

[crimsonrommer]

Is that the 601?

I tried on my demo unit and it worked

 

[manywelps]

Note that the verizon variant has removed the OEM unlock option from developer options, so you'll need to flash an FRP partition with the OEM unlock bit already set.

Leronex and I kinda puzzled that one out.

 

[crimsonrommer]

Note that the verizon variant has removed the OEM unlock option from developer options, so you'll need to flash an FRP partition with the OEM unlock bit already set.

Leronex and I kinda puzzled that one out.

Yeah issue is qfil doesn't see frp so we're trying to find a workaround

 

[Raify4]

¿Ese es el 601?

back cover shows lm v601u

 

[manywelps]

Leronex flashed a different V60's FRP (with the bit set) on my verizon phone and then the unlock worked smoothly.

He used Medusa which can flash the FRP partition independently though.

 

[crimsonrommer]

Leronex flashed a different V60's FRP (with the bit set) on my verizon phone and then the unlock worked smoothly.

He used Medusa which can flash the FRP partition independently though.

Yeah I know, the issue is qfil doesn't see it

 

[vitalez06]

Would it still be possible to update after bootloader unlock, even if it's by LGUP?

Other than that, you guys rock! Thank you for providing the translations for us mere mortals to understand

 

[crimsonrommer]

Would it still be possible to update after bootloader unlock, even if it's by LGUP?

Yep! Just make sure to use partition dl and uncheck abl_a and abl_b that way fastboot remains, and you can still extract your boot partition and root again

 

[kiory01]

 

[kiory01]

i get this error , help

 

[crimsonrommer]

i get this error , help

i dont see an error

 

[xdasree]

i dont see an error

same for me, actually no error but after clicked on portion manager, there is popup window appeared saying make sure correct firehose file selected, clicked ok, then screen stuck there no partition manager window appeared yet nothing in log folder as well.