yashsingh1/xdaforums huggingface dataset:
[LG V30 Guides, News, & Discussion] crumbling9999:
The problem is that KDZ are signed, even if you manage to extract the partition table and all partitions from a working Pixel 2 XL, there's no way to recombine them back into a KDZ. Even Brian's laf-based exploit wouldn't work, since the basis of it rely on T-Mobile device being bootloader unlockable, even if fastboot is crippled. Say you somehow manage to get the vulnerable V20/H918 laf onto the 2XL, you can't flash a TWRP-patched boot image because it'd compromise the chain of trust and the device still won't boot if its still locked, and you can't flash a factory system image because those are too big for a FAT32 partition, which is the only file system lafd can read (even though its ~1.5gb compressed). You can maybe try splitting the file into 2 and use dd's seek to write the second part, but at this point its really really advanced stuffs, I wouldn't even attempt it unless you have no other way. You'd probably have better luck seeking out a Chinese/Indian/etc.. phone repairer with illicit access to a signed firehose and recover it using EDL.
[LG V30 Guides, News, & Discussion] ASMstudent:
The only programmer firehouse file I found for SD 835 belonged to s8, I tried it out of desperation and it didn't work. I looked everywhere but I didn't find any firehouse for any pixel device. There's a way to recover by flashing OTA rescue update, so the only thing I want is a working recovery ( which is merged in boot partition). If I could flash Boot.img from a pixel update through EDL mode, my problem is fixed. As you said I need at least the programmer firehouse file for Pixel 2 XL.
[LG V30 Guides, News, & Discussion] ChazzMatt:
Yes, the Frankenstein instructions in the very thread you are in right now. You seem to have not read any part of the thread before asking questions? ;) Especially not the first few posts of page 1.

Post #5 on page 1

of this thread has this link to the instructions... The HUGE FONTS are in the post itself. You can't miss it if you even glanced at the first page of this thread.

CONVERTING ANY NORTH AMERICA V30/V30+ TO US998 OREO

That same procedure can be used to convert any North America LG V30/V30+ to another North American LG V30/V30+ -- except for T-mobile H932.

Then the title of the Instructions themselves are this:

"FRANKENSTEIN - CONVERTING ANY NORTH AMERICA V30/V30+ (except T-mobile H932) TO US998 OREO"

and the first sentence of those instructions are this:

So, YES it covers AT&T H931. It's the same procedure for all variants listed in the title (ANY North America V30/V30+ variant, except T-mobile H932). I don't know how it could be any more clear, when you are already in the very thread you need. :cool:

This thread was started to carrier unlock phones like the LS998 and H931 -- but also to convert some V30 models to other models. Later, used to obtain fastboot flash commands for bootloader unlocking for the North American variants (except T-mobile H932).
[LG V30 Guides, News, & Discussion] crumbling9999:
Well, your only hope then is that the 2XL's laf is vulnerable to whatever exploit [MENTION=3167089]runningnak3d[/MENTION] used to gain temp root, so you can dd a working boot partition. Though personally, I don't see it happening, only reason it worked for the G6 was that somehow the H918 laf on H870 firmware resulted in root inside lafd.
[LG V30 Guides, News, & Discussion] ASMstudent:
I found someone who claims to have the firehouse file. Assuming it was legit, can I load the partitions of my device by manage partition function in the original QFIL and flash boot partition with boot.img extracted from a stock image or do I need different file format to flash with.

LGUP dumb function is working for me and I could pull up all the partitions with it, but I don't know what use the extracted files offer me.
[LG V30 Guides, News, & Discussion] xaxxelous:
Last night I was able to flash (most of) US99820a firmware onto an H930DS V30S+. The flashing process went fine with LGUP except I had bootloops during setup. I couldn't keep Oreo running for more than about 30 seconds so I flashed boot and system from my original LGUP dump and it is running stable so far. I still have some testing to do and would like to find a way to run US998 fully (even though the SEA 20k system is nice an basically bloat free). Just thought I would share what I have found so far.

If anyone is interested in exactly what I did or is willing to try and help me then I will keep the thread updated.
[LG V30 Guides, News, & Discussion] ChazzMatt:
No North American variants are compatible with any H930/H93D/H930G/H930DS.

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] ChazzMatt:
If you want to keep experimenting, that's fine. But that's how [MENTION=6158380]TxanMoe[/MENTION] permanently bricked his phone, trying to flash H930DS on his H931, which he had converted to US998. If that name seems familiar, he's the person who discovered the WTF bootloader unlock exploit for our phones.
[LG V30 Guides, News, & Discussion] xaxxelous:
Ok, I'm not trying to argue, but I am genuinely curious: If that were absolutely true then how come flashing US998 Nougat and Oreo onto my H930DS didn't give me a 9008 brick?

runningnak3d said:

As for cross flashing. I checked the RSA signature for the H930, H932, H933, and US998 and they are all different. If you flash any of the signed firmware (xbl, abl, hyp, modem, etc) from one of those devices, then you have a 9008 brick and no way to fix it yourself.

Unless I'm missing something, every partition on my H930DS is from US99820a except for system and boot. An H932PR flashed US998 (which I get is North American) and the Korean variants can flash 930 and 998 firmware. Seems a few things shouldn't be possible but are.

Yes, I recognize the name. I owe thanks to you [MENTION=3250376]ChazzMatt[/MENTION], [MENTION=6158380]TxanMoe[/MENTION], [MENTION=6747174]bilong9[/MENTION], [MENTION=4296106]darkidz555[/MENTION], [MENTION=3167089]runningnak3d[/MENTION], and others from the V30 and V20 forums. I have learned much from you all in the past few weeks. I haven't even had a chance to put a sim card in this phone, so there is still more experimenting to do...
[LG V30 Guides, News, & Discussion] runningnak3d:
That was my bad. Everytime a new Qualcomm processor is released there is a learning curve.

I was looking at the wrong certs. My SD820 tools didn't work right for the SD835 and 845. I have corrected them.

The H932 is the only V30 that you can't cross flash due to RSA issues. Now there may be OTHER issues, but the certs match.

The V35 .. all certs match.

The G7 .. again, only the TMO version has a different cert.

Heck, if anyone cares the G7 boot images boot fine on the V35 and vice versa. Now the cert is different between the G7 and V35.

Anyway, I was wrong, and I have learned a lot since I made that statement.

-- Brian
[LG V30 Guides, News, & Discussion] xaxxelous:
Thanks Brian, that is good to hear. Now its just a matter of figuring out why US998 firmware reboots about 30 seconds in despite doing factory resets.
[LG V30 Guides, News, & Discussion] crumbling9999:
Try and get ADB enabled and log it down with logcat. I noted down something similar here for the V20.
[LG V30 Guides, News, & Discussion] xaxxelous:
The suggestion is appreciated. I will look into it when I get home tonight.
[LG V30 Guides, News, & Discussion] thcerry:
Hi!

I have a H930G (italy version). If I install a previous version of Oreo (anyone before the security patch) it will work?

I have the unlock.bin from LG but I try to flash it this happen : sending 'unlock' (1 KB)...

FAILED (status read failed (Too many links))

so i wanted to try this metod but don't know if i have to flash the usa firmware or the italy one.

Thank you
[LG V30 Guides, News, & Discussion] ChazzMatt:
Will what work?

No, do not flash US998 firmware.

Not sure by what you mean "this method". This thread is not about rooting. The Frankenstein method is used to convert to other firmware, for various reasons, one of which is for North American variants to get fastboot flash commands. All H930 variants have fastboot flash commands.

You need the WTF INSTRUCTIONS THREAD.

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] thcerry:
Yes, sorry! I mean that i came to this thread from the WTF one! So what firmware i have to install?

If I install a previous Oreo firmware, the WTF method will work?
[LG V30 Guides, News, & Discussion] ChazzMatt:
Why did you come to this thread from WTF? NOTHING in WTF told you to come to this thread if you have H930G.

Sent via open market LG US998 V30/V30+

WTF tells you to install earlier H930 Oreo firmware for H930G.
[LG V30 Guides, News, & Discussion] ChazzMatt:
Can you read this? What does it say near the top? Where it SPECIFICALLY mentions H930G... There's more further down , but you need to closely read those instructions.

You need to flash pre-July H93O or possibly H930G firmware. Either should work but I KNOW H930 firmware will work.

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] xaxxelous:
Well not to confuse the H930 scene, but... Here's what I have so far for crossflashing with LGUP:

***What I am doing is not usual and is not advised by anyone. If you are outside of North America and using some form of an H930 then stick with H930 firmware.***

My phone is a V30S+ H930DS originally running V20b-SEA-XX with a 1 April 2018 security patch.

I flashed the new_unlock.bin. Instead of getting an error saying the unlock failed I got a success message and was bootloader unlocked.

I have so far flashed:

US998XXX kdz - Bootloops during setup, any version from Nougat to Oreo a to g.

US99820X kdz with a corresponding /boot and /system from my LGUP dump or an H930 KDZ - stable as long as the /boot and /system partitions are from a 930 kdz close (in time) to the 998 kdz used as the base.

VS99620i kdz- boots and is stable. WAP Services and QualityDataLogService stop, but seems like they aren't needed. The main problem here is no fastboot, therefore root issues.

US99820a-g kdz then the VS99620i TWRP zip from JohnFawkes - stable, with fastboot, root, and VZW bloat. Also potentially visual voicemail, wi-fi calling, etc.

The above, stable, flashed again with US99820g zip - bootloops

All this has been done with and without factory resets between flashes.

There has been some interesting results. For example, the phone showing up as a US99820i... there is no US99820i.

I've had limited time to test, but so far adb logcat just waits for a device and SALT via FWUL shows partitions but very vaguely. I have done no testing with a SIM card because VZW is taking time adding this IMEI to their DB. I flashed the full VS99620i before I put my SIM in and called them to activate.

Ultimately I am looking for a way to get a pure US998 flash to be successful and stable. A US998 with H930 /boot and /system is acceptable, but not ideal. Any questions, concerns, comments are welcome.
[LG V30 Guides, News, & Discussion] christoophat:
Having an issue coverting my newly acquired LS998 (according the LGUP) followed these step to the letter:

1) Go into download mode (power off completely, then hold volume up button while plugging in USB cable)

2) open patched LGUP and flash NOUGAT US998 (I used 10c) to DL PARTITION. In the pop up box "Select All". Use the attached patched LGUP in this post.

3) Master Reset (post 101)

But when trying to UPGRADE to Oreo 20b to be able to unlock& root, LGUP reports that ROM is still showing as an LG998, and I cannot proceed from there. Did not get any error msg during the DLPart process

Should I try to run the Nougat .kdz again in DL Part mode, or try Oreo 20b in DL Partition mode, or?
[LG V30 Guides, News, & Discussion] Night_1:
What worked for me was to DL partition nougat... Then reburbish the same version Nougat... Then master reset...

I have an H933 though

Sent from my stock rooted LG-H933 V30
[LG V30 Guides, News, & Discussion] christoophat:
thanks for the reply. when you say "refurbish" what do you mean exactly? Do the DL Partition step over again?
[LG V30 Guides, News, & Discussion] ChazzMatt:
There's an option called Refurbish.

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] christoophat:
Not sure what happened, but I checked the phone again for HW & SW. and this time it shows as being a US998 Nougat 10c. Was able to upgrade to Oero 20b.:silly:

On to the next step!
[LG V30 Guides, News, & Discussion] xaxxelous:
Thank you!

Because of this little tip I was able to flash US998 firmware onto an H930DS like this:

1)Flash US99810d KDZ, Partition DL, select all. It may fail a few times, restart it until it is successful.

2)Factory Reset.

3)Flash US99810d KDZ, Refurbish.

4)Factory Reset.

5)Let it bootloop until it settles (3 or 4 times for me).

6)Upgrade until you are on 20g. I did 20d, 20f, 20g.

Besides doing a refurbish as suggested by [MENTION=1368735]Night_1[/MENTION], the H930DS seems to work just like any V30 with the Frankenstein Method.
[LG V30 Guides, News, & Discussion] ChazzMatt:
Interesting and congratulations.

Do you have all the US998 LTE bands now? Like LTE band 4? Because flashing H930DS to H930 didn't actually change any bands, so I'm curious if flashing H930DS to US998 actually gives you the US998 bands or if you still have H930DS bands?
[LG V30 Guides, News, & Discussion] xaxxelous:
I don't know yet. I haven't activated the phone on any network. I am waiting for Verizon to add the IMEI to their database and get back to me. We will see... If I get impatient then I will activate on a Fi SIM and test it then, I'd just like to test CDMA as well as LTE if I can.

I can say that when I had VS996 firmware and with US998 firmware I can select LTE/CDMA in Mobile Networks and it doesn't flip out. Not that it means it will actually work...

I'll report back when I know more.
[LG V30 Guides, News, & Discussion] ChazzMatt:
Hate to tell you bad news, but Verizon is never going to add the H930DS to their database. H930DS doesn't have CDMA nor LTE band 13. And Verizon doesn't care that you now have US998 firmware on it. ;). Verizon goes by the IMEI.

You're going to need an already-activated Verizon SIM card (activated on ANOTHER Verizon-eligible device) if you want to run this Frankenstein'ed phone on Verizon. Same thing former LS998 users have to do when converting those phones to Verizon VS996 or US998 -- even though they DO have CDMA & LTE band 19 on LS998 (but LS998 is locked to Sprint), as well as having both CMDA & LTE band 13 on VS996 (actual Verizon V30 firmware) and US998 (which is carrier unlocked).

Doesn't matter. Verizon only goes by the IMEI. To them, former LS998 is still "LS998" and can't be activated on Verizon. And former H930DS is still H930DS, to them -- which doesn't have the necessary bands.

The only way around it for Verizon -- I'm pretty sure -- is an already-activated Verizon SIM card.

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] xaxxelous:
Well, that said... After a few interactions with Verizon online and on the phone, starting with them telling me they can add it, now it seems that it can't work on their network at all. Like everything with Verizon online support, I take that all with a grain of salt. Activating my open market V20 was a process and I had to do it in a store.

Anyways, taking the SIM out of my active V20 and putting it in the V30 didn't work. I tried on and off for a couple/few days with both US998 and VS996 firmware. Verizon online support could recognize the SIM and tried to activate it, but no luck. They blame it on the phone. I'll take it into the store asap and see if they can do what they did with my V20 to get it on the network. Fi is still an option.

I fully expected to lose CDMA, but not sure why it can't work on Verizon at all.
[LG V30 Guides, News, & Discussion] ChazzMatt:
LTE band 13 is very important to Verizon. Even though you possibly now have LTE band 13 (if the Frankenstein conversion completely worked on your H930DS), Verizon won't activate a phone with an IMEI that does not have LTE band 13.

Find out if it really has CDMA bands and LTE band 13. Basically find out if it has the US998 bands now. ;) You may be able to activate on another carrier or a Verizon MVNO.

http://www.lg.com/us/cell-phones/lg-US998-Unlocked-v30

US998

CDMA: 800 MHz CDMA

2G GSM: 850/900/1800/1900 MHz

3G UMTS (HSPA):850/900/1900/2100 MHz

4G LTE Bands: 1/2/3/4/5/7/12(17)/13/20/25/66
[LG V30 Guides, News, & Discussion] xaxxelous:
Any suggestions how without an active SIM? Network Signal Guru, Network Cell Info, etc won't give me any info. Other than go to the Verizon Store (maybe flash VS996 first just to comfort the sales reps) and be persistent that they get it to work?
[LG V30 Guides, News, & Discussion] bmurphr1:
Does the Frankenstein bootloader unlock guide work for the H932SV variant from T-Mobile by flashing another ROM using the hacked LGUP app, applying the unlocked bootloader steps in a command prompt, and then flashing the phone back to the latest stock T-Mobile ROM running on H93220s? I'm hoping to get a temporary frankenstein ROM up and running on my phone so that I can retrieve my mmssms.db files, examine them for a few files in particular, and then reverting the phone back to stock? As long as people have had successes unlocking the bootloader on the H932SV using another KDZ/TOT and are still able to revert back to their old ROM then this is the solution that I have been looking for months now. I originally thought the frankenstein method just allowed you to crossflash over to another ROM permanently for other reasons, but from what I've read so far it looks like a viable method of bootloader unlocking and returning to your stock ROM (of course losing everything in the process). My mmssms.db and other files are stored in the cloud backed up so when I switch over to another firmware I will still be able to restore those files, look at them and find what I need, and then restore the original TMo firmware without actually keeping the phone rooted. (I value my phone's encryption way too much as I use the longest character password my phone allows me to and don't even enable fingerprint unlocking for security concerns. Please don't make fun of my tin hat.
[LG V30 Guides, News, & Discussion] thebulletfromhell:
No, simple as that. Flashing anything other than H932 KDZ onto a H932 is the quickest way to get a paperweight.
[LG V30 Guides, News, & Discussion] ChazzMatt:
NO. You never even bothered to read the first few sentences of

Frankenstein instructions

before asking your very long question. ;) Tell me what the attached screenshot below says? Like the title and especially the red bolded sentences?

FYI: After bootloader unlock and root of any V30, you CAN use encryption again. The current versions of TWRP allow encryption, including the ones listed in both WTF and H932-specific bootloader unlock/root threads. Ask encryption questions

in the TWRP thread.

So I don't understand why you don't want to unlock the bootloader and root your T-Mobile H932. There's

another thread for that which does not involve Frankenstein.

If you don't wish to remain rooted (for whatever reasons), you can also unroot the T-Mobile H932 and relock bootloader.

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] cityneversleepz:
Activated and started the Frankenstein process. Just flashed nogart 10d to download partition. The process in LG UP said complete, click here. Did that. The phone screen is blinking a little circle every few seconds. Do we just wait that out? Is something else going on like loading?
[LG V30 Guides, News, & Discussion] ChazzMatt:
If it says complete, now do the Master Reset.

Sent via open market LG US998 V30/V30+
[LG V30 Guides, News, & Discussion] cityneversleepz:
thanks, so I don't need to be able to boot into nogart. just master reset and continue the process, right?

edit: I see, now. After master reset it boots. to nogart. got it.

on nogart 10d now. now I understand.

---------- Post added at 02:22 PM ---------- Previous post was at 02:05 PM ----------

I was able to boot into nogart but then when trying to upgrade to us998b, got an error: 0x4 :not support cross model download LS998 to US998.
[LG V30 Guides, News, & Discussion] xaxxelous:
Use Partition DL or if that doesn't work try disconnecting the USB cable from the phone, restarting LGUP, and plugging the USB cable back in. Reflashing 10d in Refurbish mode helped me and at least one other person as a last resort.
[LG V30 Guides, News, & Discussion] cityneversleepz:
looks like I got it to work in ugrade mode. Did what you said about restarting. Restarted the whole computer. unplugged. But also experienced LG Up not seeing the phone. So I enabled USB debugging and let the drivers install from the phone. It's now upgrading. Thanks, normally all this can get me nervous, but your help kept me focused. So far so good.

update: Frankensteined all the way to G now. What I experienced was difficulty between upgrades getting LGUP to see the phone. What helped was the recommends from Chaz. Also enabling developer options and each time USB debugging toggled and revoke usb debug too. Once the win7 machine saw the phone , then LG UP saw it too.
[LG V30 Guides, News, & Discussion] bmurphr1:
I was given incorrect information. Someone on reddit pointed to a KDZ that works with the H932SV and said you could use it instead of another file, obviously talking out of his butt apparently. I was also not aware yet that TWRP did support full phone native encryption so now that I know that, I'd most certainly keep the phone rooted if it were possible but since it isn't it sounds like I'm just straight screwed. My apologies.
[LG V30 Guides, News, & Discussion] ChazzMatt:
[MENTION=675981]bmurphr1[/MENTION],

?? It seems you didn't read all that I wrote or you somehow misunderstood?

YES it is possible to root the T-mobile H932. It's just not possible to do it the way where you use Frankenstein.

Here, read this again below and look carefully at the sentence where I showed you where to go to root the H932... Because I linked to specific thread for you to go root your H932. Just prior to that, I also said the TWRP used in both the WTF and H932-specific root threads could be encrypted. I wouldn't have said that if you couldn't install TWRP and root the T-mobile H932. I also said you could UNroot the H932 if you didn't want to keep it rooted. Why would I say that if you couldn't root it in the first place?

I am copying and pasting my reply just as you quoted. No extra bolding or anything. You CAN see hyperlinks, right? ;)

For encryption, look at

post #333, #334, #335 on this page.

.

Last, I'll admit the one thing that annoys me is when I take time to write something out to help someone and they just seemingly ignore it. ;)
[LG V30 Guides, News, & Discussion] bmurphr1:
I did read all of the links that you posted, but I also mentioned (or at least I believe that I did that I'm on 20s firmware), which I'm not sure if I can downgrade to 20k running the latest firmware as of March 1st, 2019. I thank you for pointing out explicit instructions on multiple pages, but I don't know that it warrants getting testy in a public forum when I've been nothing but civil towards you. I apologize if I offended you in any way or made you think that I was not reading every single link and post you provided but kindness should always be treated with kindness unless you want to end up looking like a villain (which I am not saying you are, but that the demeanor you're showing is indicative of how it would look). Once again I apologize for any confusion on my behalf and I respect all of the work you've put into these projects over such a long period, but I do ask that you be mindful of what you say and how it's said in such a public forum for the sake of everyone who pays attention to this thread. No matter what though you still have my utmost respect and I thank you for all of the help you have provided me thus far.