Вы находитесь на странице: 1из 11

Open-Freax Contact

[Guide][English] Unbrick your LG Recherche…

G3
27 décembre 2015 Open-Freax
Cet article a été publié initialement le 27/12/2015 Catégories
Il n'est peut-être plus d'actualité.
Android
(Environ 10 min de lecture) Arduino
My rst Christmas present was very nice. I was on my
Astuces
way to a small village in the Paris area, I had just left the
A5 and entered this jungle that Parisians seem to love: la Auto-
Francilienne. Luckily my phone, LG G3 « International » hébergement
(D855 for short), was there to guide me. Cyber-criminalité

It is at that moment that my smartphone suddenly Environnement


passed away. Switch o , impossible to  turn it back on:
Évènements
bootloop of CyanogenMod 13, freeze when bootingTWRP
to try to re ash quickly CM, nally stuck on the LG logo. LaTeX

LibraryBox
After hours of research, all kinds of crafts … My phone is
alive. What if I told you we’re gonna x it? Linux

  Logiciels

Non classé
Well. Let’s play?
On en a gros
 
PirateBox

Step 1 : pre-requisites RGPD

Sécurité
  Let’s start with the usual : that guide worked for
Open-Freax ne dépose pas de cookies sur votre terminal, régime oblige. (Par contre, on voitServeur
la couleur de vos sous-
me, I’m not responsbile if it’s not working with
vêtements, mais chut)
your phone, if you make some mistakes, if your Techno
Je fais genre j'ai lu En savoir plus
phone burns, if you don’t read this guide with
Test
enough attention, or if you start a thermonuclear TF101
Open-Freax
war blah blah. Contact
Tutoriels 
Wordpress
 

  To follow this guide, you’ll need a bunch of tools


and les as described below. As I’m (really)
kind, and as I searched the Internet for almost 3
days trying to nd each one of them, I put those
les in a zip le that I uploaded onto my ownCloud
Pendant ce
server. temps, chez
You can download it (for free, of course) directly Unixmail…
from my server. There’s an alert with the SSL cert,
just ignore it : shared hosting… Clap de n !

On peut discuter ?

  De belles
présentations en
I put everything you need in the zip le, except for the markdown avec
TOT le that contains the original rmware, as it is kind Marp
of big (>2Gb). Link for this rmware le follows.
Startup Nation
We’ll need a computer running Windows (I did this Du lol chez les
guide under Windows 7) and: cravateux
LG drivers for the phone
Qualcomm HS-USB drivers (for this famous
« 9008 » thingy)
DSEO, to use unsigned drivers under Windows
BoardDiag by willcracker
2-3 les, like DLL linked to speci c phone models Copains
LG G3’s rmware (TOT format)
Fr33tux
LG Flash Tool v1.8
a little piece of metal such as iron wire General
a little screwdriver Changelog Team

 
Open-Freax ne dépose pas de cookies sur votre terminal, régime oblige. (Par contre, on voit la couleur de vos sous-
The thing is, to install Qualcomm drivers, your
vêtements, maisWindows
chut)
installation needs to be in «  test mode  » as they’re not
Je fais genre j'ai lu
signed by Microsoft: if you’re in «  regular mode  », you
En savoir plus
Méta
won’t be able to use those drivers. So, to start, download Connexion
Open-Freax
and extract the zip archive I linked above, and open the
Flux
Contact

des
folder  «  1-DSEO  » and execute the .exe le as an
publications
administrator. Enable test mode and reboot.
Flux des
After the  reboot, you’ll notice near the clock that your commentaires
test mode is enabled. 😉
Site de
Then, install  the content of the folder «  2-Drivers  », WordPress-FR
with the appropriate setup  (32 or  64 bits depending on
your OS) for the Qualcomm drivers, then install LG
drivers.

Step 2 : that f*ckin’ 9008 mode


Some of us think that Qulacomm SoC are indestructible.

Actually, according to phone models (because that part


does not apply only to LG G3, but to any Qualcomm
Snapdragon-based phone), there is a «  recovery
mode » that communicates (or try to, at least) with the
chip to say « hey, it’s going to be okay, you can get back
to work ». A phone placed in this mode is recognized as
QHSUSB__BULK by Windows if the correct drivers are
not installed, and as  «  Qualcomm HS-USB QDLoader
9008  » (COM port, in fact) if drivers are OK. This will
allow us to use other tools to x all that mess.

So, at this point, if you’re « lucky », your phone seems to


simply not want to switch on, and it is possible it locks
securely into 9008 mode, in which case you just have to
plug it to tue computer to check … or you’re less
fortunate and you’re stupidly starring  at the LG logo
waiting for it to vanish. Phone  may eventually enter
in fastboot mode after 15-20min. Note that this fastboot
mode does you no good, since it only gives errors if you
try to use it.
Open-Freax ne dépose pas de cookies sur votre terminal, régime oblige. (Par contre, on voit la couleur de vos sous-
vêtements, mais chut)
 
Je fais genre j'ai lu En savoir plus
Teardown
If you’re stuck with LG logo… Real fun is around the
Open-Freax
corner. Open up your G3, pull the battery out and take o Contact

the 8 screws that maintain the upper plastic part on the
motherboard. Leave the one just near the camera in
place, it’s okay. Pull of the SIM card / SD card, if any.

You’re now facing your phone’s motherboard. There’s a


« metal block » in the middle of the mobo, you can safely
remove it, it should come very easily.

There we are. We’re going to use a metal wire to make


contact between the 2 red dots   you can see on the
picture above.  You’ll have to maintain contact between
those points, and use you 3rd hand to connect the USB
cable to your computer. Windows should detect the
device almost instantly. Count to 5 seconds, and release
the contact.

Windows’ Device Manager is your best friend now: go


check that the COM port we were talking earlier is
detected (Qualcomm 9008…).

Now, let’s get the party started


Open-Freax ne dépose pas de cookies sur votre terminal, régime oblige. (Par contre, on voit la couleur de vos sous-
Download   from StorageCow  the TOT le corrsponding
vêtements, mais chut)
to your phone. The link points to the folder for « LG G3
Je fais genre j'ai lu En savoir plus
international D855  », the model we have here in
Europe. You want to download V10E rmware, in 16Gb or
Open-Freax
32Gb depending on your phone. Contact

Once the le is on your computer, simply open the « 3-
BoardDiag by willcracker » folder of my archive and run
BoardDiag. Fill the window as below:

BIN should refer to your TOT le and  DIR to the folder


you want to extract the TOT le to. click on Extract, and
let the magic be. No, it’s not frozen, even if if looks like it
is… that process may take 10-15min 😉

1. AP Check : self-explaining
2. EMMC Test : we’ll check internal memory for
defects…  don’t select a speci c particion, we’ll test
the entire EMMC
3. AP chipset
Open-Freax : B2pas
ne dépose corresponds
de cookies sur to our G3’s
votre chip oblige. (Par contre, on voit la couleur de vos sous-
terminal, régime
4. Com port : the one a ected byvêtements,
Windows mais(see
chut) your
device manager 😉 )
Je fais genre j'ai lu En savoir plus
Once the extraction process is done, point « Target dir »
Open-Freax
to the same folder, double chek COM port and click Contact

« START ».

If you’re lucky enough (again)  both of the tests will be


OK. If, like me, you have nothing but a huge FAIL on the
EMMC test,  in the options list switch  «  Read/Write  »
to  «  Erase  », unplug/plug your G3  (always with your
metal wire to have 9008 mode, that’s pain in the a*s but
it’s mandatory) and click START again. Internal memory
will be entirely erased. Do a «  read/Write  » again, this
time it should be a PASS.

Now untick EMMC Test select « RESTORE BOOT IMG ».


Choose and restore, one by one and in the right order:
aboot, BackupGPT, boot, dbi, laf, PrimaryGPT, recovery,
rpm, tz. Check there’s no errors during the process!

Once it’s OK and ONLY if everything’s OK, put the


battery back into the phone (still connected to the
computer) and ash the Sbl1 partition.  This will cause
the phone to reboot. DO NOT FLASH SBL1 BEFORE THE
OTHER PARTITIONS (you want super-brick? 😉 ).

Weeeell. If the TOT le you have corresponds exactly to


the ROM you were running before the crash, your phone
MAY start normally. Otherwise, unplug the USB cable,
remove the battery, put it back in place, keep pressing
Vol+ button and plug again the USB cable. When you see
the « Download Mode » screen, release Vol+ button.Now
you should see the «  Firmware upgrade  » screen, and
believe me, that’s a relief. \o/

Step 3 : back to stock


Open-Freax
We ne dépose
just need to ashpas stock
de cookies
ROM sur then.
votre terminal, régime oblige. (Par contre, on voit la couleur de vos sous-
vêtements, mais chut)
Install LG Flash Tool from «  4-LG Flash Tool v1.8  »
Je fais genre j'ai lu En savoir plus
folder, but don’t run it yet. Replace the MegaLock.dll le
in C:\LG\LGFlashTool\ with the one in the archive.
Open-Freax
In the devices manager, right click on « LGE AndroidNet
Contact

USB Serial Port  » and go to Properties> Port settings  >
Advanced, and change COm port to 41. Apply.

Back to  LG Flash Tool, tick  «  Select Manual Mode  »,


point the DLL thing to the
given  «  LGD855_20140526_LGFLASHv160.dll  » le,
which corresponds (again) to D855 ONLY.Other DLL are
in their respective folders on StorageCow, along with
TOT les.

Click  «  Add  » button on the right of S/W  and point to


your TOT le.

Click OK, and in the main window just click on the yellow
arrow. You may need to unplug and plug back your
phone (again, in Download Mode) for the transfer to
start. This may take a while to begin, maybe 1 minute.

Transfer should be quick (less than 5min) and Flash Tool


should throw
Open-Freax an pas
ne dépose error somewhere
de cookies after régime
sur votre terminal, 85% oblige.
(not (Par
a contre, on voit la couleur de vos sous-
problem, the phone should be restarting: vêtements, mais chut)error
every
after 85% should be ne). Je fais genre j'ai lu En savoir plus
Note : I personnally couldn’t transfer my ROM, I faced
Open-Freax
an error that was caused by LG Flash Tool not being fully Contact

compatible with USB3. Try again with a USB2 port, or
another computer.

(yeah, interface changed, I had to move to my old laptop


with Windows 7 and… USB2 ports…)

Once you’re done, you should be able to boot your  G3


into Android !!

I included in the archive another version of  LG Flash


Tool 2014,  for KDZ les ashing, if that’s more
convenient for you. If you’re not sure about how to ll
the window, just ask.

Bonus : G3’s
Open-Freax ne IMEI
dépose pas issurgone
de cookies votre terminal, régime oblige. (Par contre, on voit la couleur de vos sous-
vêtements, mais chut)
Well, remember? We wiped everything.  Maybe a full
wipe was not required, I don’t know,
Je fais genre j'ai maybe
lu wiping
En savoir plus
some partitions only would have been enough. But for
Open-Freax
now, our IMEI is « 000 », and no phone carrier will allow Contact

our G3 to connect to one of its antennas.

As we are all serious guys, we all have our backup of the


EFS partition, right?  You know, one you should have
done with TWRP right before ashing it for the 1st time…

This is the most simple way : root our rmware(Android


4.4.2 : easy), install TWRP, put the backup on an external
SD card and restore it.

Root
You need to go into your phone settings, tap 7 times on
build number to unlock Developer Options, and in this
section you have to enable USB debugging (ADB). Then,
run the installer in the folder « 5-Root » and launch the
tool. Plug the G3 to  the computer  and click  «  Start  ».
You’ll have to authorize the computer ngerprint on the
phone, tick «  Always  » of course. the script should be
doing its magic right now.

TWRP
I included TWRP 2.8.7.0 by jon777 with modem support,
F2FS and so on. Once you’ve rooted the phone, open the
folder « 6-TWRP », right click in it while pressing Shift
key. You’ll be able to open an invite from here. AGAIN,
this TWRP le is for D855 only. For other
variants, download it from here.

In the console, enter  : adb.exe push recovery.img


/sdcard/, adb.exe shell, then  su. SuperSU should pop on
the phone: authorize the shell. You’re now  root.
Enter:  dd if=/dev/zero
Open-Freax ne dépose pas de cookies sur votre terminal, régime oblige.
of=/dev/block/platform/msm_sdcc.1/by-name/recovery , (Par contre, on voit la couleur de vos sous-
vêtements, mais chut)
and  dd if=/sdcard/recovery.img
of=/dev/block/platform/msm_sdcc.1/by-name/recovery
Je fais genre j'ai lu . plus
En savoir
Now type  exit twice, and nally adb.exe reboot
Open-Freax
recovery. The phone should reboot right into TWRP! Contact

Now you’re free to restore an EFS backup, a full backup…

What if I don’t have any EFS backup?


Too bad. I faced this issue once (that’s why I have a
backup of my EFS, now…), you can apply GZ’s method
on the G3. Just go to  DroidViews  and follow the
instructions.

Over!
Here we are. I survived 3 days without my phone, and I
wanted to demonstrate that there’s always something to
do before throwing something away and replacing it by a
new one.  I ash CyanogenMod 13 again, along with
OpenGApps, and I’m ne for now.

Big thanks  (really !) to 777jon, team code re,


l33tlinuxh4x0r, hacklockx, hyelton and xian2786  from
XDA forums for their guides and tools which helped me
going through this.

 Android,neAstuces,
Open-Freax Tutoriels
dépose pas votre
de cookies sur brick, d855, régime
terminal, hack oblige. (Par contre, on voit la couleur de vos sous-
vêtements, mais chut)

Je fais genre j'ai lu En savoir plus


← [Tuto] Unbrick du LG G3 Chi rer son smartphone… Ou
Open-Freax pas ? → Contact

Fièrement propulsé par WordPress
Sauf mention contraire, les contenus de ce site sont publiés sous licence Creative Commons 4.0 By-SA.

Politique de con dentialité

Open-Freax ne dépose pas de cookies sur votre terminal, régime oblige. (Par contre, on voit la couleur de vos sous-
vêtements, mais chut)

Je fais genre j'ai lu En savoir plus

Вам также может понравиться