Develop Bugs

Lenovo Vibe Shot z90-7 unlock radio bands and improve signal strength

So this is tutorial that i'm putting together after i bricked the signal of my phone. It took me week of digging and learning of usb debugging tens of posts read and I managed to repair it plus additionally unblock various regions in radio settings menu (*#*#4636#*#*).
I should mention that there is no warranty on anything I'm about to write
Step by step:
1) phone has to be rooted and has superSu so flash it with appropriate rom
2) download and install following:
https://mega.nz/#F!RA83UTjA!M4v2djifO27mcL1OSzO9Ew
3) Download and install android SDK package
4) set your phone to USB debugging
5) on your PS go to \Users\(your user name)\AppData\Local\Android\sdk\platform-tools
hold SHIFT+right click--->Open command window here
Have your phones screen on and type in command window on your PC :
adb shell (enter)
su (phone will ask to grant permission)
setprop sys.usb.config diag (enter)
6) Go to device menager--->COM Ports-->Hs lenovo diadnostic click properties and change driver to the one you downloaded. It should come as HTC diagnostic
7) open QXDM Professional (you downloaded) go to Options-->Communication-->target port. Now set the COM port where your phone is installed. Go back to the main window and from "View" dropdown menu select "NV Browser".
8) You will now locate following lines and change their values to the one i provide(remember to backup original values).
8a) Select dual sim and remember to change settings for both sims "subsciption" first 0 then 1
Select item hit "Read" change the value then hit "write":
441: 0x380
946: 0x0FFF
1877: 1970325105345408
2954: 0
6828: 1904863 (experimental LTE band unlock)
You might have some values already on your phone...I messed mine in the first place so I'm not sure which ones are original
9) go to your phone deselect USB debugging then restart now you should have additional menu to change band settings in *#*#4636#*#* phone info.
10) to improve signal strenght edit build.prop on your phone located in /root/system
find line "ro.ril.hsxpa=1" and change the value to 2 then start adding lines as follows:
ro.ril.enable.dtm=0
ro.ril.gprsclass=10
ro.ril.hep=0
ro.ril.enable.3g.prefix=1
ro.ril.hsdpa.category=8
ro.ril.hsupa.category=6
ro.ril.enable.a53=1
Some of it might not work for specific countries/carriers so just experiment
Credit goes to:
http://forum.xda-developers.com/member.php?u=5061839
http://forum.xda-developers.com/member.php?u=2136084

how to root it for z90a40 / international firmware?

Hello Fucpl , you're more able to unlock the band 800 LTE ? I tried to change some items in NVRAM but without success.
It seems instead thah in the Czech model lte 800 functions properly . Look below
Bye!
https://www.youtube.com/watch?v=Mv5RoN_BYSc

Unfortunately i have no 4g card at all so I have no option to experiment. But I used this guide as a source:
http://forum.xda-developers.com/showpost.php?p=56577252&postcount=455

fucpl said:
Unfortunately i have no 4g card at all so I have no option to experiment. But I used this guide as a source:
http://forum.xda-developers.com/showpost.php?p=56577252&postcount=455
Click to expand...
Click to collapse
Hello Fucpl , the guide I tried as well but without result . I think the problem lies in the modem firmware , which probably does not include the band 800 as not used in China . The solution would be to flash the modem of the Czech rom , but we have to find it

Anybody tried this?

chrhouse said:
Hello Fucpl , the guide I tried as well but without result . I think the problem lies in the modem firmware , which probably does not include the band 800 as not used in China . The solution would be to flash the modem of the Czech rom , but we have to find it
Click to expand...
Click to collapse
There should be a phone software backup in QPST. I havent tried it but this might be a way of ripping the czech rom. Would be nice to try it out....Out of the box question- how is a reception on your vibe shot? Mine is constantly fluctuating in one minute, same spot i can have full bars and then suddenly drops to 1 or none and then call quality becomes rough and choppy.

does this guide really work?
I'm trying to use LTE on 2600 mhz in canada and I am not sure if my phone is on a different LTE band or what.
Has anyone else had success with this guide?

fucpl said:
6) Go to device menager--->COM Ports-->Hs lenovo diadnostic click properties and change driver to the one you downloaded. It should come as HTC diagnostic
Click to expand...
Click to collapse
Points 1-5 worked fine, but now at driver changing i have a problem. there is a HS Lenovo but i could not change it to HTC diagnostic, how could i force this win7 64-Bit? Tried to search in folder and picked file manually. Thanks for your help.
edit: think i left test mode after flashing i'll try later again
edit2: tried again, Win 7 64-Bit is still in Testmode but no chance to change the driver to HTC. Win always says driver is already uptodate.
Any idea how i could manage this problem in another way?
i found out some codes for Vibe shot:
*#*#8363#*#* select SGLTE+G/DSDA aso.
*#*#333583#*#* FDD-LTE enable
with these FDD could be enabled and some settings of the band also - but no chance to bring me a working cell back...
Any ideas? Maybe could anybody try these codes and give me the settings?

I'm stuck at the first step! How do you root this phone?? Please help =(

bhatth09 said:
I'm stuck at the first step! How do you root this phone?? Please help =(
Click to expand...
Click to collapse
needrom.com/download/lenovo-z90-7-rom-update-android-5-1-multilingual-google-service-root/

Hi I already am on s208.
I tried miflash but i keep getting error "reached end of file" when I try to flash rooted rom.
I tried renaming it as update.zip and flashing via recovery but no luck, just says installation failed.
Any advice?

bhatth09 said:
I tried renaming it as update.zip and flashing via recovery but no luck, just says installation failed.
Any advice?
Click to expand...
Click to collapse
ask or serach in the Z90-7 international ROW Thread, this is the unlock radio thread.

zxmame said:
ask or serach in the Z90-7 international ROW Thread, this is the unlock radio thread.
Click to expand...
Click to collapse
Has anyone successfully managed to unlock FDD 800MHz?

fucpl said:
6) Go to device menager--->COM Ports-->Hs lenovo diadnostic click properties and change driver to the one you downloaded. It should come as HTC diagnostic
Click to expand...
Click to collapse
now testing with XP SP3 but also no chance to take your HTC driver. Any ideas?

LTE B20
chrhouse said:
Hello Fucpl , you're more able to unlock the band 800 LTE ? I tried to change some items in NVRAM but without success.
It seems instead thah in the Czech model lte 800 functions properly . Look below
Bye!
Try this... Maybe a possible solution to LTE Band 20 problem !!!! Chose CZ regional settings....
Check: ####5993#
Change: ####682#
Click to expand...
Click to collapse

xbingo32 said:
chrhouse said:
Hello Fucpl , you're more able to unlock the band 800 LTE ? I tried to change some items in NVRAM but without success.
It seems instead thah in the Czech model lte 800 functions properly . Look below
Bye!
Try this... Maybe a possible solution to LTE Band 20 problem !!!! Chose CZ regional settings....
Check: ####5993#
Change: ####682#
Click to expand...
Click to collapse
The above solution does not work.
Click to expand...
Click to collapse

i found an easy way to fix broken radio after *#*#4636#*#* and Band set to USA-Band.
Do the points like fucpl wrote to point "adb shell" and "su"
fucpl said:
Step by step:
1) phone has to be rooted and has superSu so flash it with appropriate rom
2) download and install following:
https://mega.nz/#F!RA83UTjA!M4v2djifO27mcL1OSzO9Ew
3) Download and install android SDK package
4) set your phone to USB debugging
5) on your PS go to \Users\(your user name)\AppData\Local\Android\sdk\platform-tools
hold SHIFT+right click--->Open command window here
Have your phones screen on and type in command window on your PC :
adb shell (enter)
su (phone will ask to grant permission)
Click to expand...
Click to collapse
Then enter:
1. Start background prozess to sdm0:
cat /dev/smd0 &
2. Have a look at your band settings:
echo -e 'AT$QCBANDPREF?\r' > /dev/smd0
my settings were wrong:
$QCBANDPREF:
"24.GSM_850"
"26.GSM_PCS_1900"
"28.WCDMA_II_PCS_1900"
"31.WCDMA_V_850"
3. Change the settings (have a look at the list, DO NOT take this settings "8,9"):
echo -e 'AT$QCBANDPREF=1,"8,9"\r' > /dev/smd0
("8,9" are the settings from the list, this command writes directly
to NVRAM, so you don't have to do anything else after that)
4. Then "OK" should appear:
[email protected]_row:/ # AT$QCBANDPREF=1,"8,9"
OK
5. if nothing appears in terminal you could hit "Return".
Your Lenovo Z90-7 should now be back with connection and your settings.
to test just enter:
echo -e 'AT$QCBANDPREF?\r' > /dev/smd0
$QCBANDPREF:
"8.GSM_DCS_1800"
"9.GSM_EGSM_900"
Have fun
This was tested with S208 ROOT.
Maybe we have a chance to activate Band 20 with AT commands. I'll check this out these days.
The mainreason for this was fixing my broken radioband
Another example, this command sets the following Bands:
[email protected]_row:/ # AT$QCBANDPREF=1,"8,9,10,24,25,26,27,28,31,34,38,43"
OK
AT$QCBANDPREF?
$QCBANDPREF:
"8.GSM_DCS_1800"
"9.GSM_EGSM_900"
"10.GSM_PGSM_900"
"24.GSM_850"
"25.GSM_RGSM_900"
"26.GSM_PCS_1900"
"27.WCDMA_I_IMT_2000"
"28.WCDMA_II_PCS_1900"
"31.WCDMA_V_850"
"34.WCDMA_VIII_900"
"38.WLAN_EUROPE_2400"
"43.WLAN_EUROPE_5000"
Choose from this list:
"1.BC0_A"
"2.BC0_B"
"3.BC0"
"4.BC1"
"5.BC3"
"6.BC4"
"7.BC5"
"8.GSM_DCS_1800"
"9.GSM_EGSM_900"
"10.GSM_PGSM_900"
"11.BC6"
"12.BC7"
"13.BC8"
"14.BC9"
"15.BC10"
"16.BC11"
"17.BC12"
"18.BC14"
"19.BC15"
"20.BC16
"21.GSM_450"
"22.GSM_480"
"23.GSM_750"
"24.GSM_850"
"25.GSM_RGSM_900"
"26.GSM_PCS_1900"
"27.WCDMA_I_IMT_2000"
"28.WCDMA_II_PCS_1900"
"29.WCDMA_III_1700 "
"30.WCDMA_IV_1700"
"31.WCDMA_V_850"
"32.WCDMA_VI_800 "
"33.WCDMA_VII_2600"
"34.WCDMA_VIII_900"
"35.WCDMA_IX_1700"
"36.WLAN_US_2400 "
"37.WLAN_JAPAN_2400"
"38.WLAN_EUROPE_2400"
"39.WLAN_SPAIN_2400"
"40.WLAN_FRANCE_2400 "
"41.WLAN_US_5000"
"42.WLAN_JAPAN_5000"
"43.WLAN_EUROPE_5000"
"44.WLAN_SPAIN_5000"
"45.WLAN_FRANCE_5000 "
"46.Any"

lenovo network problem
hi everyone,
i am a new member i signed up to get spme advice. few weeks ago i bought a lenovo vibe shot which had a rom with baidu and the other rubbish installed and to get rid of them i flashed the 5.1 rom successfully. However i was not happy with the strength of signals it was getting and i tried some things i found on this website to unlock radio bands. unfortunately i was not successful with that and now it does not make or receive call. it shows one max two bars network and still shows the name t-mobile which is wrong from the beginning as it should show ee because im on 4g. but the calls not connecting for some reason. i tried following the steps mentioned here but because i am just simply not good enough to solve the issue. well, would anyone be so kind and write the procedure down in the simplest the very simplest way to a beginner? please i would appreciate the help. i would love to use the phone again as it is much nicer then my moto x 2nd. just one more thing is the a chance a marshmallow update is out for the vibe shot? thanks again and sorry for the trouble

Did you try the above version with AT commands?
You need Root S208 and Terminal app from google play,
it is the minimum

H815 CM 13 - Mobile network disappears

Hi. Recently I installed Cyanogenmod 13 on my LG G4 H815 (international, without any broadband) and I like it for some reasons, but I have one issue.
Sometimes my network connection (I prefer using 3G, but the same is with LTE) disappears and I have only GSM without internet connection. There was no such problem with stock ROM.
I flashed cm-13.0-20160721-NIGHTLY-h815.zip. I searched a little and found similar problem with CM13, but on OnePlus One forum.cyanogenmod.org/topic/118316-cm13-mobile-data-connectivity-issues/
Not much I found.
I attach my screen when problem appears: i.imgur.com/zntwdZu.png
Thanks for your help.

I checked some stuff with ADB.
1. netmgr is working
Code:
h815 / # ps -A | grep netm
radio 10063 1 23900 3472 v_datagram 7faeaf3fe4 S /system/bin/netmgrd
2. I can switch mobile data connectivity with commands
Code:
svc data disable
svc data enable
3. There is no any messages in dmesg while turning data on/off.
4. Reboot seem to fix this for some time.

This is known problem, see CM thread...
Switching back and forth flight modus should help

I cannot find thread you speak of. Would you share link with me?
Airplane mode is good idea. Also turning off and on rado in *#*#4636#*#* menu makes it work immediately.

I cannot find thread you speak of. Would you share link with me?
Airplane mode is good idea. Also turning off and on rado in *#*#4636#*#* menu makes it work immediately.

baldpale said:
I cannot find thread you speak of. Would you share link with me?
Airplane mode is good idea. Also turning off and on rado in *#*#4636#*#* menu makes it work immediately.
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?p=67861068

Thanks

Dialer codes

I have found a bunch of codes as seen on the screenshots below. These are from the h932 but might work on other variants.
*#*#52325929766#*#* - LCD test(weird we have a oled)
*#*#54635564#*#* - Modem Protocol
*#*#00*4#*#* - IPV4
*#*#00*46#*#* -IPV4V6
*#*#00*6#*#* - IPV6
*#*#00*77710#*#*
*#*#00*77720#*#* these five are sim toggles that aren't
*#*#00*77730#*#* supported by my phone
*#*#00*77740#*#*
*#*#00*77790#*#*
*#*#1472365#*#* - United Protocol Debug tool( this has a bunch of options like a on device adb shell but its very limited)
*#*#244773825625#*#* - Version Info
*#*#366243#*#* - EMMC ID
*#*#762646427225#*#* - Fake Roaming settings
*#*#5773282#*#* - LPP Data Viewer[this has alot of interesting toggles]
*#*#32823787#*#* - Data Sanity Test Suite
*#546368#*XXX# - Replace the XXX with model number like 998/930/932. This is the hidden menu.
I can confirm this also works on the v20.

R800x_user said:
I have found a bunch of codes as seen on the screenshots below. These are from the h932 but might work on other variants.
Click to expand...
Click to collapse
Very interesting, but i have no idea what they are for.

zrzhu said:
Very interesting, but i have no idea what they are for.
Click to expand...
Click to collapse
I'll be editing in a while for what code does what, But I think the most important one should be the united protocol debug tool.

R800x_user said:
I'll be editing in a while for what code does what, But I think the most important one should be the united protocol debug tool.
Click to expand...
Click to collapse
I saw your PM about this, but not sure what they will do. After messing up one V30 US998 with hidden menu LTE bands, I'm a little leery.
Still don't know if that one is messed up or not. I switched to V30+, bought my wife a different V30, and that other one (my original with static LTE band issue) which I factory reset is my backup.
I can try these in hidden menus on that one.
Sent from my official carrier unlocked LG V30+ US998

ChazzMatt said:
I saw your PM about this, but not sure what they will do. After messing up one V30 US998 with hidden menu LTE bands, I'm a little leery.
Still don't know if that one is messed up or not. I switched to V30+, bought my wife a different V30, and that other one (my original with static LTE band issue) which I factory reset is my backup.
I can try these in hidden menus on that one.
Click to expand...
Click to collapse
I can relate i had a similar incident but a hard reset fixed my issue. Ive updated the op.

Lg v30+ LS998U
R800x_user said:
I have found a bunch of codes as seen on the screenshots below. These are from the h932 but might work on other variants.
*#*#52325929766#*#* - LCD test(weird we have a oled)
*#*#54635564#*#* - Modem Protocol
*#*#00*4#*#* - IPV4
*#*#00*46#*#* -IPV4V6
*#*#00*6#*#* - IPV6
*#*#00*77710#*#*
*#*#00*77720#*#* these five are sim toggles that aren't
*#*#00*77730#*#* supported by my phone
*#*#00*77740#*#*
*#*#00*77790#*#*
*#*#1472365#*#* - United Protocol Debug tool( this has a bunch of options like a on device adb shell but its very limited)
*#*#244773825625#*#* - Version Info
*#*#366243#*#* - EMMC ID
*#*#762646427225#*#* - Fake Roaming settings
*#*#5773282#*#* - LPP Data Viewer[this has alot of interesting toggles]
*#*#32823787#*#* - Data Sanity Test Suite
*#546368#*XXX# - Replace the XXX with model number like 998/930/932. This is the hidden menu.
I can confirm this also works on the v20.
Click to expand...
Click to collapse
I just tried all of these on my Ls998U and none work I have these so far for the LS998U
LG LS998U Codes
Hidden Menu: 5689#*998#
IMEI Display: *#06#
DIAG Mode: ##3424#
Data Mode: ##3282#
Net Reset(SCRTN): ##72786#
Rtn Menu : ##786#
Debug Mode: ##33284#
Error log: ##564#
De-Brand : ##27263#

zxhwk said:
I just tried all of these on my Ls998U and none work I have these so far for the LS998U
LG LS998U Codes
Hidden Menu: 5689#*998#
IMEI Display: *#06#
DIAG Mode: ##3424#
Data Mode: ##3282#
Net Reset(SCRTN): ##72786#
Rtn Menu : ##786#
Debug Mode: ##33284#
Error log: ##564#
De-Brand : ##27263#
Click to expand...
Click to collapse
Get an app called engineer mode test tool it will show you the rest of the dailer codes that are hidden

R800x_user said:
Get an app called engineer mode test tool it will show you the rest of the dailer codes that are hidden
Click to expand...
Click to collapse
It seems like they don't work with the Google phone app. That's a bummer ?

guytano86 said:
It seems like they don't work with the Google phone app. That's a bummer ?
Click to expand...
Click to collapse
Yeah they won't work on that but will work on the stock phone app.

I did try and use your suggestion and install that app but for some reason most of the codes I found for the LS998 are NOT listed in the engineering mode app and most of the ones that are listed in the app for some reason CRASH the APP and basically useless app for my Ls998 could be I have most of the stock apps blocked and disabled could be the problem this APP crashes but I am still working on a work around of unlocking the bootloader in some way there has to be a way because this is man made meaning it can be done at some time or another

zxhwk said:
I did try and use your suggestion and install that app but for some reason most of the codes I found for the LS998 are NOT listed in the engineering mode app and most of the ones that are listed in the app for some reason CRASH the APP and basically useless app for my Ls998 could be I have most of the stock apps blocked and disabled could be the problem this APP crashes but I am still working on a work around of unlocking the bootloader in some way there has to be a way because this is man made meaning it can be done at some time or another
Click to expand...
Click to collapse
Could be the issue. You wont know until you try it again but with most Packages re-enabled and see if that makes a change. If not you're out of luck

I did try it again and when I choose Engineering mode and chose Phone info it tells me this App will not work for this device and Like I said before Most if not all the codes it generates do Nothing at all that are useful .
I even tried it in several modes enable DIAG mode first and do the tests Nothing
Different Sim Cards Nothing none of the codes work on this version of the V30+ ( LS998) (Sprint)
But I am NOT giving up on this phone since I have never owned an LG phone before and this PHONE cost me Absolutely NOTHING $0 dollars so I have Nothing to loose if I brick it
( It was a free-bee from sprint because of account problems but I never activated it and never plan to unless I have full control over the Phone )
I will stick to my HTC M8 its works and looks perfectly

zxhwk said:
I did try it again and when I choose Engineering mode and chose Phone info it tells me this App will not work for this device and Like I said before Most if not all the codes it generates do Nothing at all that are useful .
I even tried it in several modes enable DIAG mode first and do the tests Nothing
Different Sim Cards Nothing none of the codes work on this version of the V30+ ( LS998) (Sprint)
But I am NOT giving up on this phone since I have never owned an LG phone before and this PHONE cost me Absolutely NOTHING $0 dollars so I have Nothing to loose if I brick it
( It was a free-bee from sprint because of account problems but I never activated it and never plan to unless I have full control over the Phone )
I will stick to my HTC M8 its works and looks perfectly
Click to expand...
Click to collapse
Sprint phones are very locked down.

I know they lock them tight but that intrigues me more to unlock it
I am sure there is a way just have to figure it out.
If I knew what Signature it was looking for during a ADB SideLoad update or recovery I may be able to use the US998 Recovery Image to force a flash and then unlock it I have all the KDZ image files from all versions except the LS998
While in Download mode hit the power key 2 times
This Menu appears but do not know what to do with it
** Select Menu**
** Select : Power Key(Long) **
** Move : Power Key(Short) **
--> MA-USB(WIFI) DL
--> POWER OFF
--> PHONE INFO
--> BACK

zxhwk said:
I just tried all of these on my Ls998U and none work I have these so far for the LS998U
LG LS998U Codes
Hidden Menu: 5689#*998#
IMEI Display: *#06#
DIAG Mode: ##3424#
Data Mode: ##3282#
Net Reset(SCRTN): ##72786#
Rtn Menu : ##786#
Debug Mode: ##33284#
Error log: ##564#
De-Brand : ##27263#
Click to expand...
Click to collapse
So does Hidden Menu: 5689#*998# actually work on your LS998U? None of them works on mine with Android 8.0 updated...
Thanks!

yes they all work at least on my sprint LS998U they do
I am going to just sell the one I have its brand new and everything original with box never been activated so its completely clear

How does ##7764726998 work? The service code is not 000000

None of these bring up the service menu so I can turn off the moisture detection.

Anyone know if any of these codes or the main hidden menu can ask for an APN update push to my US998 using Verizon SIM? Stupid carrier APN lockout since Android 8 means I can't edit the APN setting on my own, even with root. Haven't found an app on the Play store to do it or a Magisk module yet.

Check the LG v30 questions and answers forum for a thread titled "can't receive MMS pictures with third party texting with Verizon"
In the second page there is a post by RockStar2005 to a link that might possibly help you. Click on the "this webpage" link (sorry, not sure how to copy all of that over to this forum).

WiFi hotspot Sprint version

So I got an unlocked version of the sprint's LG G8 variant. Everything works perfectly excepet the wifi hotspot.
I can connect to it but I get the "No access to Internet" message. Any ideas why?
Thanks!

mariomtes said:
So I got an unlocked version of the sprint's LG G8 variant. Everything works perfectly excepet the wifi hotspot.
I can connect to it but I get the "No access to Internet" message. Any ideas why?
Thanks!
Click to expand...
Click to collapse
Download "Setttings database editor" by 4a. Open it up and click on Global properties, scroll down until you see "tether_dun_required". Change the value to zero. You now have internet via hotspot. It's best to buy the add on because it keeps the setting locked even if you restart phone. Enjoy?

Toni_RM said:
Download "Setttings database editor" by 4a. Open it up and click on Global properties, scroll down until you see "tether_dun_required". Change the value to zero. You now have internet via hotspot. It's best to buy the add on because it keeps the setting locked even if you restart phone. Enjoy?
Click to expand...
Click to collapse
Tried that. I get an error that says I can't edit that table

mariomtes said:
Tried that. I get an error that says I can't edit that table
Click to expand...
Click to collapse
Oh my bad i left out the most important part.
1. Install adb on your laptop (search it up)
2.On your phone go to settings, general, about phone, software info, find build number section and keep tapping until you are a developer
3. Go back to general and you'll now see developer options, turn developer options on and go down to usb debugging and turn it on.
4. Connect your phone to your laptop via USB (you will get a promt on your phone along the lines of "allow USB debugging?", click ok) and open up command terminal
5. Type "adb" and press enter
6. Type the command (without quotes) "adb devices". Your device should show up.
7. Type "adb shell" and press enter
8. Open up the settings database editor and go to global and scroll down to tether_dun_required. Click "edit value" and the shell command should pop up.
Type the shell command into adb shell and press enter
9. Go to the settings data base editor and go back to the tether_dun_required and click on change value. You'll notice that you are now able to change the value, change it to 0.
10. Enjoy your hotspot!
It seems like a lot of steps but it's not. The most "difficult" task will be installing adb.

Awesome. Got it to work now. Do you have to set it to 1 for the Ota updates or after each reset? Thanks again!

No, theres no need to set it back to "1". After you shut off your phone the setting value will turn back to a "1" and you hotspot wont work until you switch it back to "0". To save time you can buy the feature pack and you'll get access to settings guardian which will keep it at "0" at all times.

Question How to access fastboot ?

Hi,
I recently try to root my OPPO RENO 6 5G (PEQM00).
I bought an unlocktool license and I managed to unlock my bootloader however I had to flash the wrong rom (A11 and not A16) due to the wifi and bluetooth not working anymore ...
Here are some pictures: my oem unlock is ok, magisk is well installed.
I managed to patch the correct version of the boot.img with magisk but I cannot access fastboot to flash the correct version ...
When I try I have the message:
serial_do_not_match
fastboot verify fail
If you have a solution ... I also can't get the scatter file ... I have an error
Thanks, R3MY

I want to clarify that the problem probably comes from the boot.img because in recovery mode when I try to update online I manage to connect to wifi.

Hello may I ask if you have had any success in rooting the OPPO RENO 6 5G? If so, can you share the steps on how to access fastboot mode? Thank you in advance...
If I am not mistaken, Oppo company has strict policy against rooting, so they disable fastboot mode to make it difficult to root.

dima114 said:
Hello may I ask if you have had any success in rooting the OPPO RENO 6 5G? If so, can you share the steps on how to access fastboot mode? Thank you in advance...
If I am not mistaken, Oppo company has strict policy against rooting, so they disable fastboot mode to make it difficult to root.
Click to expand...
Click to collapse
Hi dima114,
I use Unlocktool to bypass authentification on OPPO Reno 6 5G. (it's a paid software).
U can add me on discord it's more simple to exchange. R3MY#4706
Regards, R3MY

remy411 said:
Hi,
I managed to patch the correct version of the boot.img with magisk but I cannot access fastboot to flash the correct version ...
Click to expand...
Click to collapse
Try ""adb reboot fastboot"" maybe ?

rootinhoppo said:
Try ""adb reboot fastboot"" maybe ?
Click to expand...
Click to collapse
I have already try i have this error : unlock_verify_fail so the phone reboot in normal mode.

Ok.
You can try to temporarily disable all kind of locking (pin code, gesture...)
I see you have an option "do not user lockscreen ("ne pas utiliser le chiffrement d'application") in developer mode. Although I don't believe it'll change anything, you can try with this option on. And, at the very bottom of the developper mode, you may have an option called "disable permission monitoring" ("desactiver la surveillance des applications"). You may toggle this one too.
Then test again and see if it changes something. Either way, don't forget to put the options back to normal when you're done.
ps: btw, when you type "adb devices", your device id appears, right?

rootinhoppo said:
Ok.
You can try to temporarily disable all kind of locking (pin code, gesture...)
I see you have an option "do not user lockscreen ("ne pas utiliser le chiffrement d'application") in developer mode. Although I don't believe it'll change anything, you can try with this option on. And, at the very bottom of the developper mode, you may have an option called "disable permission monitoring" ("desactiver la surveillance des applications"). You may toggle this one too.
Then test again and see if it changes something. Either way, don't forget to put the options back to normal when you're done.
ps: btw, when you type "adb devices", your device id appears, right?
Click to expand...
Click to collapse
when i type adb devices, device id appear, yes.
But that's about it... i cannot enter fastboot mode no matter what i try... by pressing power+volume down, power+volume up, or pressing all 3 buttons together. I also tried to enter fastboot mode using adb command adb reboot-bootloader, to no avail.
I've also tried your suggestions, unfortunately, it doesnt work.

dima114 said:
when i type adb devices, device id appear, yes.
But that's about it... i cannot enter fastboot mode no matter what i try... by pressing power+volume down, power+volume up, or pressing all 3 buttons together. I also tried to enter fastboot mode using adb command adb reboot-bootloader, to no avail.
I've also tried your suggestions, unfortunately, it doesnt work.
Click to expand...
Click to collapse
Yeah it's normal OPPO don't like root and the bootloader is locked
You need to unlock your bootloader with a software like UnlockTool. (19$ for 3 Months)

remy411 said:
Hi dima114,
I use Unlocktool to bypass authentification on OPPO Reno 6 5G. (it's a paid software).
U can add me on discord it's more simple to exchange. R3MY#4706
Regards, R3MY
Click to expand...
Click to collapse
i add u discord, please accept. dedefathah