[LG G7 ThinQ  Guides, News, & Discussion] strifej:
Here's a simple guide for those of you like me who bought a cheap ULM G7 that's actually cross flashed from something else (Sprint for my case).

I got mine with Oreo 11e on it. I'll just explain the steps to get to unlock with 20e (Pie) rooted. I'm not an expert, but I've been doing this stuff for a lot of years. I probably can't answer questions on why it's not working for your situation, so hopefully others can jump in when necessary.

These steps worked for me. Some may be unnecessary. Not sure.

DISCLAIMER: Don't blame me if something goes wrong. Again, this worked for me.

First of all, you'll want to flash to 11g, because we have a patched rooted boot image for it.

https://lg-firmwares.com/downloads-file/17341/G710ULM11g_01_NAO_US_OP_1112

Install the patched LGUP (GUI one, not command line).

Flash 11g by doing a Partition DL, select the kdz in the bottom half (click on the first empty line).

After it's done and it reboots into the system. Let it boot, do the initial setup to get into options and enable OEM unlock and USB debugging.

Then do the unlock guide here:

https://xdaforums.com/lg-v40/development/unlock-lg-v40-via-9008-root-t-mobile-t4042207

You can follow the steps in there exactly. There is nothing different that needs to be done for the G7. You're basically using QFIL to flash the v35 eng boot to get a hacked fastboot.

You're now bootloader unlocked.

Now, we want to get 20e rooted. Before we flash the 20e kdz, we need a patched boot image (Magisk). We have to create a patched boot image from the stock boot image. So, here are the steps for reference. If you want to skip this (trust me, you do), download my patched boot image here: https://mega.nz/#!uqZFDKZQ!5dOCFKElmMOXnAMel7dSvyhGY5RkJjBsMwM-kH7eOGo

Skip until you see "Skip to here".

* I was informed after that it's easier to just flash the 20e kdz, then use QFIL to extract the boot image instead of fooling around with kdztools. Leaving this for reference. *

Dowload the 20e firmware: https://lg-firmwares.com/downloads-file/21135/G710ULM20e_00_NAO_US_OP_1010

Use kdztools to unkdz, then undz:

Download the DEVEL branch: https://github.com/steadfasterX/kdztools/tree/develop

Install python. I'm using 3.8 x64 for Windows 10.

In a command prompt, run "pip install zstandard" which you need to unkdz.

In your extracted kdztools folder, run:

python unkdz.py -f <path to 20e kdz> -x

This extracts a .dz file.

Now run:

python undz.py -f <path to extracted dz file> -s 42

This extracts the boot image (you can see it's 42 if you do a -l instead of -s).

Now you have your clean/stock 20e boot image.

Go back into fastboot (if you're not still there) and BOOT the rooted 11g boot image: https://androidfilehost.com/?fid=1899786940962574205

fastboot boot 710ULM11g_rootedboot.img

It'll boot into the system and magisk is installed temporarily. Copy the clean 20e boot image onto your phone. Install Magisk Manager, then in Magisk Manager, click the first Install (top of the 2) and it'll pop up a window. Click Install again, then it'll show a menu with 4 options (honestly, the patch should be moved to the main menu imo). Click "Select and Patch a File". Find your 20e boot image and choose it. Magisk will now patch it and create a magisk_patched.img. This is your rooted 20e boot.

Skip to here.

Now we flash 20e to get Pie. Same as above, use LGUP to partition_dl the 20e kdz (select all).

Once it's done, it'll reboot. Wait for it to get to the initial setup (I don't like force rebooting while system is doing possibly important stuff). Get back into 9008 mode. Use QFIL to flash the patched boot img to "boot_a". Once that's done, just vol down + power for 15 seconds to force a reboot.

You're now 20e + root + bootloader unlocked.

I won't be monitoring this thread a lot, so don't expect quick responses, but there's enough details here for most people who are familiar with rooting to get to where I am.