Edit: as of May 21, 2023 I no longer have to repeat step 8 and 9 after device restarts to get voWiFi working on my Chinese OP11 (converted to Global A10 using ocdt method).
Note:
I am just a power user not a developer. If you have any questions most likely I won't have the answer.
Only tested on my Chinese OnePlus 11 on CPH2449 Global A07 firmware with Canadian carrier Freedom Mobile.
PDC steps have to be executed again after each device reboot.
What do you need:
OnePlus 11, Windows PC, a VoLTE/VoWiFi provisioned SIM card.
1. Download the followings
efstools-0.14
Pixel 4 mbn
PDC
VoLTEEnabler Magisk module
2. Install PDC, .net 5.0, OnePlus USB driver and Qualcomm Driver.
3. replace mcfg_sw.mbn in efstools-0.14 folder with pixel 4's mbn file
4. Connect your phone to PC, run below commands to open your phone for connection:
adb shell
su
setprop sys.usb.config diag,serial_cdev,rmnet,adb
Click to expand...
Click to collapse
5. Start Windows Command Prompt in administrator mode, cd to efstools-0.14 folder, then run below command to backup EFS
EfsTools.exe downloadDirectory -i / -o <replace_with_your_output_folder_name>
Click to expand...
Click to collapse
6. Run below commands to make your carrier think that your OnePlus 11 is a Pixel 4 (My Freedom Mobile SIM card is in SIM slot 1, if your SIM card is in slot 2 the commands may differ slightly)
EfsTools.exe writeFile -i mcfg_autoselect_by_uim -o /nv/item_files/mcfg/mcfg_autoselect_by_uim
EfsTools.exe uploadDirectory -i mcfg_sw.mbn -o / -v
Click to expand...
Click to collapse
7. Install VoLTEEnabler on Magisk then reboot your phone. Enable VoLTE and/or VoWiFi from SIM info & settings.
8. Run below commands again to open your phone for connection:
adb shell
su
setprop sys.usb.config diag,serial_cdev,rmnet,adb
Click to expand...
Click to collapse
9. Run PDC, select device to load profiles, deactivate the current Activated profile then activate GCI_Commercial for sub0 if your SIM is in slot 1or sub1 if your SIM is in slot 2 (If you're with a different carrier you may need to enable a different profile, try them out one by one hopefully one of them will work). You have successfully enabled VoWiFi if your phone has a VoWiFi sign on the status bar (a wifi single icon above a phone icon).
10. Run step 8 and 9 again each time your OnePlus 11 is restarted.
Hi, my carrier enable Volte only for selected devices (samsung or iphone), so what I have to change in you guide to make it works?
Thamk you
Thanks for sharing. I added your instructions to my thread on OnePlus
OnePlus Community
Introducing our new OnePlus Community experience, with a completely revamped structure, built from the ground-up.
community.oneplus.com
I hate that I need to root phone for this ****, it should come out of the box working like Samsung, or Pixel
samtruman81 said:
Hi, my carrier enable Volte only for selected devices (samsung or iphone), so what I have to change in you guide to make it works?
Thamk you
Click to expand...
Click to collapse
I need to know what is the command to chose the devices to "emulate". it's not clear. Someone can help me?
If you are going to run magisk, why not just run a module that permanently replaces the mbn file?
wangdaning said:
If you are going to run magisk, why not just run a module that permanently replaces the mbn file?
Click to expand...
Click to collapse
The file is in the efs partition so it's not easily accessible.
TheNewHEROBRINE said:
The file is in the efs partition so it's not easily accessible.
Click to expand...
Click to collapse
I see, I don't have the device, so cannot look at what is listed under / . Are you sure it is its own directory or is it actually a syslink to another directory?
On Pixel 3 the files are in /vendor, but to make a magisk module you put the modification in the /system/vendor, maybe that would work. /system/efs/....mbn
wangdaning said:
I see, I don't have the device, so cannot look at what is listed under / . Are you sure it is its own directory or is it actually a syslink to another directory?
On Pixel 3 the files are in /vendor, but to make a magisk module you put the modification in the /system/vendor, maybe that would work. /system/efs/....mbn
Click to expand...
Click to collapse
I think the contents of the efs partition aren't even mounted anywhere but I'm not sure though.
If rooted, what do you get with "ls /" ?
wangdaning said:
If rooted, what do you get with "ls /" ?
Click to expand...
Click to collapse
I don't have a OnePlus 11 a OnePlus 8T (it still has got an EFS partition obviously). This is the the content of my root folder.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
TheNewHEROBRINE said:
I don't have a OnePlus 11 a OnePlus 8T (it still has got an EFS partition obviously). This is the the content of my root folder.
View attachment 5876311
Click to expand...
Click to collapse
Thanks, my guess is efs is actually in one of those other folders. Or, more specifically the modem files are located in another folder. Most likely vendor. Here is the module I created for the pixel 3 to modify the mbn_software.txt to make it work in China. It might give some clues on how to make a module for you guys.
I have the phone now, the files are in "/vendor/firmware_mnt/image/modem_pr/mcfg/configs/mcfg_sw"
This may be strange, I would like to disable Volte on OP11 by any chance?
This is a great thread. It's been a nightmare roaming in USA from Canada because Rogers hasn't approved OnePlus 11 IMEI(s) to use voLTE, resulting in many US networks effectively impaired to operate correctly. I'm thus switching to Canadian provider bell, which has approved the provisioning of voLTE for this device.
It would be great to have an on device way of executing the above steps, even if it requires, redo after every reboot.
I believe we have the service providers to blame for this rather than OnePlus, as this issue only pertains to the providers that haven't yet "approved" the device.
Note: Rogers also hasn't approved device to use NR/5G, whereas Bell-Canada has
Guys I've just found a way to do this on device.
NOTE: no root required
Credit to the below thread
Enable 5G？Does this operation apply to OnePlus 11?
Enable 5G for Android 11 on OnePlus 8 series and OnePlus 7 5G I have a OnePlus 11 imported from China. In Italy, I use TIM operator and cannot connect to NSA 5G network (my other 5G Mi MIX4 can connect to TIM’s NSA 5G network in my area), unless...
forum.xda-developers.com
It's a combination of Shizuku and Pixel IMS.
It was able to force VoLTE on my device even with a Service Provider (in this case Rogers-CAN) that hadn't authorized VoLTE provisions for this OnePlus 11 IMEI/device model.
Now all I'm trying to do is leverage this same/similar method to force NR/5G provisions
I made step by step instructions for Shizuku:
This doesn't mean it will work with your Carrier, but it may. It will give you options in settings to turn both VoLTE and VoWiFi on off.
Doesn't work with Freedom Mobile and Telus in Canada. Meaning for us that it doesn't work it will need full root procedure and replacing mbn file via adb shell. More about it https://community.oneplus.com/thread/1284987
Apps you need:
Shizuku app (Playstore) https://play.google.com/store/apps/details?id=moe.shizuku.privileged.api&hl=en_CA&gl=US
Latest Pixel IMS https://github.com/kyujin-cho/pixel-volte-patch/releases
I used 1.2.4.
OnePlus USB driver http://www.mediafire.com/file/zkua1ob0dzaor09/OnePlus_USB_Driver_Setup.exe/file
On your phone:
Developer options unlocked
Under Developer option
USB Debugging ON
Disable permission monitoring ON
Connect your phone to computer (computer must have OnePlus USB driver installed)
Change USB settings from Charging Only to File transfer/Android Auto
Open CMD on your computer as admin:
start shizuku service by executing adb command
adb shell sh /sdcard/Android/data/moe.shizuku.privileged.api/start.sh
Open Shizuku app:
In Shizuku you should see status that is running
Under Authorized applications approve pixel IMS
Open Pixel IMS app:
"Allow all the time" when seeing prompt asking for Shizuku permission
Adjust as required (turn on VoLTE and VoWIFI)
*** Engineering Mode app doesn't work with OP 11 if someone knows there is version that is working please let me know, so I can try to open port for PDC. Tnx.
*** Even with Shizuku app cannot run EFS Tool command
astracd said:
I made step by step instructions for Shizuku:
This doesn't mean it will work with your Carrier, but it may. It will give you options in settings to turn both VoLTE and VoWiFi on off.
Doesn't work with Freedom Mobile and Telus in Canada. Meaning for us that it doesn't work it will need full root procedure and replacing mbn file via adb shell. More about it https://community.oneplus.com/thread/1284987
Apps you need:
Shizuku app (Playstore) https://play.google.com/store/apps/details?id=moe.shizuku.privileged.api&hl=en_CA&gl=US
Latest Pixel IMS https://github.com/kyujin-cho/pixel-volte-patch/releases
I used 1.2.4.
OnePlus USB driver http://www.mediafire.com/file/zkua1ob0dzaor09/OnePlus_USB_Driver_Setup.exe/file
On your phone:
Developer options unlocked
Under Developer option
USB Debugging ON
Disable permission monitoring ON
Connect your phone to computer (computer must have OnePlus USB driver installed)
Change USB settings from Charging Only to File transfer/Android Auto
Open CMD on your computer as admin:
start shizuku service by executing adb command
adb shell sh /sdcard/Android/data/moe.shizuku.privileged.api/start.sh
Open Shizuku app:
In Shizuku you should see status that is running
Under Authorized applications approve pixel IMS
Open Pixel IMS app:
"Allow all the time" when seeing prompt asking for Shizuku permission
Adjust as required (turn on VoLTE and VoWIFI)
*** Engineering Mode app doesn't work with OP 11 if someone knows there is version that is working please let me know, so I can try to open port for PDC. Tnx.
*** Even with Shizuku app cannot run EFS Tool command
Click to expand...
Click to collapse
I did this (in fact using the latest and greatest version of Pixel IMS 1.2.6) and still it doesn't work on Tmobile in Chicago - it is so f***ng frustrating. Can someone confirm if rooting the phone is the key to make this work? If so, I dont mind risking rooting my phone.....
kmahesh said:
I did this (in fact using the latest and greatest version of Pixel IMS 1.2.6) and still it doesn't work on Tmobile in Chicago - it is so f***ng frustrating. Can someone confirm if rooting the phone is the key to make this work? If so, I dont mind risking rooting my phone.....
Click to expand...
Click to collapse
You need to check if adding pixel mbn file will work with t-mobile US
Here are detailed steps
OnePlus Community
Introducing our new OnePlus Community experience, with a completely revamped structure, built from the ground-up.
community.oneplus.com
for those who are facing issue to enbale
i can unlock your engeering mode
Related
I removed download link due to this method not working on lollipop.
This guide is deprecated, please use TWRP Recovery from this thread to install root
DISCLAMER and WARNING: I'm not responsible for bricked devices, dead SD cards, thermonuclear war, or the current economic crisis. Please do some research if you have any concerns about this app.
Click to expand...
Click to collapse
You have been warned!
Links:
Sony PC Companion
Download link removed while I will test for compatibility with 5.x, md5 summ: e2c34b07faa415a6cbb95943649c7eba
Step 1:
Code:
[URL="source.android.com/source/building-devices.html#unlocking-the-bootloader"]Unlocked bootloader[/URL]
1. Enable adb debug
2. adb reboot bootloader
3. fastboot oem unlock (twice if requested)
4. fastboot format cache
5. fastboot format userdata
6. fastboot getvar all (and verify that it is)
7. fastboot reboot
Step 2:
Code:
Updated to the latest KNX01V
[URL="http://www.sonymobile.com/us/tools/pc-companion/"]Install Sony PC Companion[/URL] and use Supports Zone -> Accessories software update -> Smartwatch 3
Step 3:
Code:
Have Flashboot (Sony s1 flash) drivers installed just in case (Install Sony PC Companion and do update as indicated in previous step)
Step 4:
Code:
[COLOR="red"]BOOT [/COLOR][COLOR="Red"](DO NOT EVER FLASH IT!!!)[/COLOR] rooting boot.img
1. Download rooting kernel image (SWR50-rootboot.img)
2. Reboot into bootloader (adb reboot bootloader)
3. fastboot boot SWR50-rootboot.img
4. Wait till device reboots or sits in black screen for a while (1 min+ then reboot it by holding power 10+sec)
Step 5:
Code:
Verify by:
1. adb shell
2. su
3. you should see [email protected]:/ #
Step 6:
Code:
1. Let me know!
2. Use it, dive into GPS investigation or customizations, etc.....
Special thanks:
1. Justin Case for LG G Watch rooting method using LGGW-rootboot.img
2. osm0sis for Android Image Kitchen
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
reserved
How it works:
1. Each boot.img packs zImage (real kernel) and ramdisk (special files for kernel use)
2. This one has all modifications from LGGW rootboot by Justin Case:
a. Adds su binary, superuser.sh install script, modified install-recovery.sh and additional step into init.rc file to invoke superuser.sh install script. Also modifications to mount system as rw and some disabled security.
3. So basically it mount system as rw and does following (cut from superuser.sh install script):
Code:
#!/system/bin/sh
/system/bin/mount -o remount,rw /system
/system/bin/sleep 2
/system/bin/cat /sbin/su > /system/xbin/su
/system/bin/cat /sbin/su > /system/xbin/daemonsu
/system/bin/cat /sbin/install-recovery.sh > /system/etc/install-recovery.sh
/system/bin/chown 0.0 /system/xbin/su
/system/bin/chown 0.0 /system/xbin/daemonsu
/system/bin/chown 0.0 /system/etc/install-recovery.sh
/system/bin/chmod 06755 /system/xbin/su
/system/bin/chmod 06755 /system/xbin/daemonsu
/system/bin/chmod 755 /system/etc/install-recovery.sh
/system/bin/sync
/system/bin/sleep 3
/system/bin/reboot
I have dumped the rom from my debug/test version and was wondering if you were able to give me a guide on how i could try and flash it with a retail version? I presume this root guide probably won't work for me
Well, if hardware and partitions are the same - I do not see why it will not work. However, it will not help to flash.
I might try to compile twrp, but will have to carefully read its docs first.
thanks @XorZone confirmed as working and a nice easy process too (I was already unlocked).
Out of curiosity, modded LGGW rootboot or just renamed?
iBuzman said:
thanks @XorZone confirmed as working and a nice easy process too (I was already unlocked).
Out of curiosity, modded LGGW rootboot or just renamed?
Click to expand...
Click to collapse
Thanks for letting me know!
I reverse engineered changes in LGGW by unpacking and comparing ramdisks from both rootboot and original lg kernel and then applied the same changes to our kernel extracted from PC Companion files.
great thinking and good job ?
btw, that pic confirmed su access to watch over bluetooth debug connection ?
really great tutorial. I am planning to buy this watch, but I think currently there is NO app that requires Root. so I wonder how can we get benefit of this ?
Kurotsuchi said:
really great tutorial. I am planning to buy this watch, but I think currently there is NO app that requires Root. so I wonder how can we get benefit of this ?
Click to expand...
Click to collapse
There is at least Wear Control app: https://play.google.com/store/apps/details?id=octathorp.wearcontrol
I plan to code density changer that will require access to adb, so either from rooted phone or rooted wear.
Kurotsuchi said:
really great tutorial. I am planning to buy this watch, but I think currently there is NO app that requires Root. so I wonder how can we get benefit of this ?
Click to expand...
Click to collapse
how to benefit?
root apps of course!!
(sry for bad pic, unlocked bootloader z3 in low light [emoji12]
XorZone said:
There is at least Wear Control app: https://play.google.com/store/apps/details?id=octathorp.wearcontrol
I plan to code density changer that will require access to adb, so either from rooted phone or rooted wear.
Click to expand...
Click to collapse
that's awesome man! will purchase mine next week, can't wait to root it. thanks for the answer.
Thanks for the root, XorZone. For anyone wondering, here's the dmesg of the watch
A few small observations from digging:
The main chipset seems to be the BCM23550
The CPU has 4 cores, 2 are disabled in software. Should be easy enough to reenable if you please
It definitely has WiFi hardware, but the firmware is currently missing from the image. If you mange to get a hold of compatible firmware and nvram, it should be simple enough to get WiFi up and running
The WiFi firmware message mentions a "43341". Which is odd because apparently the main chipset does have WiFi support built in. Searching for a Broadcom 43341 gives you this, but this might just be a red herring.
cb22 said:
Thanks for the root, XorZone. For anyone wondering, here's the dmesg of the watch
A few small observations from digging:
The main chipset seems to be the BCM23550
The CPU has 4 cores, 2 are disabled in software. Should be easy enough to reenable if you please
It definitely has WiFi hardware, but the firmware is currently missing from the image. If you mange to get a hold of compatible firmware and nvram, it should be simple enough to get WiFi up and running
The WiFi firmware message mentions a "43341". Which is odd because apparently the main chipset does have WiFi support built in. Searching for a Broadcom 43341 gives you this, but this might just be a red herring.
Click to expand...
Click to collapse
Yeah, I noticed the same about WiFi chip, it might be that they packed bcm43341 as part of the BCM23550 soc, like Invensense MPU9250 chip packs mpu6500 inside.
For the 43341 I'm finding it in the configs here: https://android.googlesource.com/kernel/tegra/+/bdde9f16131a5ac2039062d5ce22e3e153acbe68^!/
Looks like BCM43341 is BCM4334 + NFC chip, so we could try S3 I9300 files as per http://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Firmwares
how can i grant superuser permission to an app? i install es file explorer with sideload but i can't get superuser permission. the procedure is ok
Sorry admins for not putting in correct location....
Moved to Correct Area!
cdrshm said:
Sorry admins for not putting in correct location....
I can not get my device to show up in adb devices and its driving me crazy. Tried windows 7/8/server 2012R2 ..lol
Now I have done my fair share of custom roms and bootloaders.
OG Droid
Nexus
Nexus 10
Asus Memo Pad (came from alarm company, and could only load one app...now its a full running tablet)
I am sure its a silly thing I have done or am missing...
Thoughts....ideas?..need more info?
Click to expand...
Click to collapse
As usual, check if adb enabled in settings-about-developer options, if there are no developer options - it is as usual 7 times click on build number in about screen.
And please use Q&A thread for such questions
I've confirmed root survives the Lollipop update
Wow, I was out whole weekend, will have to catch up with the update
Update (9 Oct 2022):
Upload module here.
Update (7 Apr 2021):
If you are looking for the manual way to add 5G support besides the magisk module way or the module does not work for you. Please refer to #54 for the detailed steps. Thanks again to @Kars88.
Update (2 Mar 2021):
In reply #45, @Kars88 discovered the magisk module to enable 5G and VoLTE/VoWIFI. Thanks to @Kars88 and the module owner ender-zhao.
Update UK VoLTE file - https://github.com/ender-zhao/Pixel...load/3.82e/Pixel5_NR_magisk_module_V3.82e.zip
Module for China users - https://github.com/ender-zhao/Pixel...load/3.82e/Pixel5_NR_magisk_module_V3.82e.zip
Module to enable VoLTE/VoWIFI switches only - https://github.com/ender-zhao/Pixel...Pixel5_VoWIFI.VoLTE_magisk_module_V1-MINI.zip
@Kars88 's KPN module is in reply #45.
Original post:
Thanks to @Lemon200, I enabled 5G on my 4a 5G with the direction - https://forum.xda-developers.com/t/...-to-your-pixel-5-solved.4187025/post-83964575.
VoLTE steps:
1. Install attached Volte_switchonly.zip in magisk. This module is only to enable VoLTE and VoWIFI switches in system and reboot.2. I find my carrier's mbn file in Oneplus Nord rom (attached, you have to find yours). Use EfsTools to extract files by typing
EfsTools.exe extractMbn -i mcfg_sw.mbn -p mcfg
Click to expand...
Click to collapse
The files we need are located in mcfg\nv\item_files\ims directory. There is a suffix in each file name... remove them (my case is __E1FF_F).3. Reconnect QPST EFS Explorer, backup all files under nv\item_files\ims. Then replace all files in nv\item_files\ims with the files from mbn. And reboot phone. After reboot, check IMS status by dialing *#*#4636#*#*, phone info, 3-dot, IMS service status.
IMO, it should work with Pixel5 as they are using the same SOC.
There should be a way to replace mbn files to enable both 5G and VoLTE. But I failed to replace mbn files with magisk module... bootloop... Maybe I replace the wrong files. Hope someone can find a more perfect way.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Thanks I will try this tomorrow on my pixel 5
Got this working on my Pixel 5, more info here: https://forum.xda-developers.com/t/...r-pixel-5-solved.4187025/page-3#post-84168995
Thank you @laughterwym. It's nice to be able to fix Google's shortcomings myself with the aid of other knowledgeable members of this community. Hopefully Google will get off their lazy asses and make this 5G and volte hassle unnecessary in the future.
Where can I find the mentioned path
"nv\item_files\ims" in root explorer
Would you please explain more about the 3rd step
Thanks
Eiad Ajam said:
Where can I find the mentioned path
"nv\item_files\ims" in root explorer
Would you please explain more about the 3rd step
Thanks
Click to expand...
Click to collapse
Not in root explorer, you have to use QPST. There is a tool called EFS Explorer after you installed QPST which is used to modify EFS partition. More details: https://forum.xda-developers.com/t/network-signal-guru.4005511/post-83499679
laughterwym said:
Not in root explorer, you have to use QPST. There is a tool called EFS Explorer after you installed QPST which is used to modify EFS partition. More details: https://forum.xda-developers.com/t/network-signal-guru.4005511/post-83499679
Click to expand...
Click to collapse
I have tried to replace the files in the mentioned directory with no luck to get ims registered
my phone is Pixel 5 - STC network (Saudi Arabia)
I have used the same mbn file as my Pixel 4xl which have registered ims successfully
Eiad Ajam said:
I have tried to replace the files in the mentioned directory with no luck to get ims registered
my phone is Pixel 5 - STC network (Saudi Arabia)
I have used the same mbn file as my Pixel 4xl which have registered ims successfully
Click to expand...
Click to collapse
Maybe you have to find your carrier's nbm file in attached Oneplus Nord modem files (or other 765g platform). I saw there are lots of differeces from my old Pixel3 nbm file.
Is there any chance to force activation Wi-Fi Calling? I am living in Poland and using T-Mobile, which is not supported by Google (also Google Store is not available in Poland).
I would like to buy pixel 4a 5G, however VoWiFi is necessary for me due to coverage issues.
Blacha8 said:
Is there any chance to force activation Wi-Fi Calling? I am living in Poland and using T-Mobile, which is not supported by Google (also Google Store is not available in Poland).
I would like to buy pixel 4a 5G, however VoWiFi is necessary for me due to coverage issues.
Click to expand...
Click to collapse
I cannot verify VoWiFi as my carrier does not support it. Wait for other's solution then.
laughterwym said:
Maybe you have to find your carrier's nbm file in attached Oneplus Nord modem files (or other 765g platform). I saw there are lots of differeces from my old Pixel3 nbm file.
Click to expand...
Click to collapse
Tried more than 12 mbn files with no luck
Thank you
Edit: i have done factory reset to my phone
And i was able to get ims registered successfully
Thank you so much
But now when i added secondary sim (esim)
The ims is not registered
Also Vowifi is now working although it is supported im my carrier
Eiad Ajam said:
Tried more than 12 mbn files with no luck
Thank you
Edit: i have done factory reset to my phone
And i was able to get ims registered successfully
Thank you so much
But now when i added secondary sim (esim)
The ims is not registered
Also Vowifi is now working although it is supported im my carrier
Click to expand...
Click to collapse
which mbn you used ?
the QPST required or not because always failed to connect with my pixel 5 ?
gamal001 said:
which mbn you used ?
the QPST required or not because always failed to connect with my pixel 5 ?
Click to expand...
Click to collapse
I have usd Vodafone UK in Volte folder
Yes you needs QPST EFS file explorer to get it done
Does anyone know where/how to get mbn files from other phones with the same modem? I got 5G working on my Pixel 5, WiFi calling works but having IMS issues so I'm eager to keep trying.
Kars88 said:
Does anyone know where/how to get mbn files from other phones with the same modem? I got 5G working on my Pixel 5, WiFi calling works but having IMS issues so I'm eager to keep trying.
Click to expand...
Click to collapse
which mbn file have you used ?
please find attached below pixel 5 full mbns
Kars88 said:
Does anyone know where/how to get mbn files from other phones with the same modem? I got 5G working on my Pixel 5, WiFi calling works but having IMS issues so I'm eager to keep trying.
Click to expand...
Click to collapse
You can download the full fw from phone vendor's website. Extract the radio image then... mbn for redmi k30 5g is attached.
sorry for being dumb. I am able to enable 5G with QPST, but cannot understand this post on how to enable VoLTE. Could someone who is successful in doing this provide a step by step guide on how I may do this?
Thanks so much in advance
Edit: I am able to enable VoLTE now, thanks for the guide
cescman said:
sorry for being dumb. I am able to enable 5G with QPST, but cannot understand this post on how to enable VoLTE. Could someone who is successful in doing this provide a step by step guide on how I may do this?
Thanks so much in advance
Edit: I am able to enable VoLTE now, thanks for the guide
Click to expand...
Click to collapse
You just need to replace the files in nv/item_files/ims with the suitable ims files for your country
Please specify what mbn file you're using and i will provide you with ims files
Eiad Ajam said:
You just need to replace the files in nv/item_files/ims with the suitable ims files for your country
Please specify what mbn file you're using and i will provide you with ims files
Click to expand...
Click to collapse
After some more research and trial & error, I can now have access to volte on my phone, but thanks for offering help.
The only thing is, I can only get ims registered and volte available by setting the preferred network type (on the page *#*#4636#*#*) to NR/LTE, while the default value NR/LTE/CDMA/EvDo/GSM/WCDMA does not work. I wonder if this may cause any problem
cescman said:
After some more research and trial & error, I can now have access to volte on my phone, but thanks for offering help.
The only thing is, I can only get ims registered and volte available by setting the preferred network type (on the page *#*#4636#*#*) to NR/LTE, while the default value NR/LTE/CDMA/EvDo/GSM/WCDMA does not work. I wonder if this may cause any problem
Click to expand...
Click to collapse
I lost VoLTE today, and because I have set the network type to NR/LTE only, I missed some phone calls without any warning. Then I checked the folder nv/item_files_ims and found there are some new files generated.
Run through the guide to enable VoLTE again, I will see how it goes in the next few days
cescman said:
I lost VoLTE today, and because I have set the network type to NR/LTE only, I missed some phone calls without any warning. Then I checked the folder nv/item_files_ims and found there are some new files generated.
Run through the guide to enable VoLTE again, I will see how it goes in the next few days
Click to expand...
Click to collapse
Make sure to keep the network set on LTE from sim settings
Unhappy with the new Internet Settings Quick Settings tile?
You can restore the old WiFi and Cellular Quick Settings tiles by running the following adb command (root required):
Edit: Seems the November update broke this, however, credit to raimondas-rimkus who has found a workaround! Post here.
Inject this setting first:
adb shell settings put global settings_provider_model false
Then run this command:
adb shell settings put secure sysui_qs_tiles "wifi,cell,$(settings get secure sysui_qs_tiles)"
Enjoy!
Yeh, I'm not a fan of that new internet tile! Will be changing it via adb... Cheers
I'm rooted on my P6 Pro and this didn't work for me. Worked for me on my 4XL though.
Cares said:
I'm rooted on my P6 Pro and this didn't work for me. Worked for me on my 4XL though.
Click to expand...
Click to collapse
ditto and i didn't know how to revert, it f*d up my whole tile layout just reflashed.
Pixel 4a 5G here.
Did the update to Android 12, and immediately adb'd my tiles back, worked fine.
2 days later I got the November 5 Update, now the settings are gone.
Tried again, this time without any effect. Seems like Google strengthened their grip around their users ***** (phones).
I think I managed to bypass the "fix" that was introduced in November 5 update.
The code that removes the tiles: https://cs.android.com/android/plat...temui/qs/customize/TileQueryHelper.java;l=124
This checks for "settings_provider_model" feature flag in build.props. Overriding of these flags is allowed thru Developer Options -> Feature Flags. Sadly no feature flags are shown there as of now.
BUT, we can still inject this setting:
adb shell settings put global settings_provider_model false
Now running the original adb command will work:
adb shell settings put secure sysui_qs_tiles "wifi,cell,$(settings get secure sysui_qs_tiles)"
I used the following to get a Wifi tile using Tasker and some other tools: https://www.xda-developers.com/bring-back-wifi-toggle-quick-settings-android-12-tasker-project/
raimondas.rimkus said:
I think I managed to bypass the "fix" that was introduced in November 5 update.
The code that removes the tiles: https://cs.android.com/android/plat...temui/qs/customize/TileQueryHelper.java;l=124
This checks for "settings_provider_model" feature flag in build.props. Overriding of these flags is allowed thru Developer Options -> Feature Flags. Sadly no feature flags are shown there as of now.
BUT, we can still inject this setting:
adb shell settings put global settings_provider_model false
Now running the original adb command will work:
adb shell settings put secure sysui_qs_tiles "wifi,cell,$(settings get secure sysui_qs_tiles)"
Click to expand...
Click to collapse
I can confirm this worked for me.
raimondas.rimkus said:
I think I managed to bypass the "fix" that was introduced in November 5 update.
The code that removes the tiles: https://cs.android.com/android/plat...temui/qs/customize/TileQueryHelper.java;l=124
This checks for "settings_provider_model" feature flag in build.props. Overriding of these flags is allowed thru Developer Options -> Feature Flags. Sadly no feature flags are shown there as of now.
BUT, we can still inject this setting:
adb shell settings put global settings_provider_model false
Now running the original adb command will work:
adb shell settings put secure sysui_qs_tiles "wifi,cell,$(settings get secure sysui_qs_tiles)"
Click to expand...
Click to collapse
Thanks a lot! This worked. I will update the OP with this info and give you credit
This worked for me but I'm pretty sure I had to edit my Quick Navigation settings to actually add the toggle to the list.
For the longest time, I thought it never worked until I saw a video about an .apk that adds the Wi-fi toggle and they said to edit the Quick Navigation settings to actually add the Wi-Fi toggle to the Quick Navigation list. :/
Worked for me as well (after rebooting).
Note that you must have 'adb shell settings put global settings_provider_model false', otherwise it will not work.
It works immediate ! For 6 Pro
Perfect, this worked for me.
It works for me as well but Idk why I've got this error:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
asdor said:
It works for me as well but Idk why I've got this error:
View attachment 5471923
Click to expand...
Click to collapse
Use Command Prompt (CMD) instead of PowerShell. There's a way to get commands to work in PowerShell but I never remember how.
Hurray! Great. But I always used PowerShell for all my previous phones as well as for rooting my current Pixel 6 Pro and there were no issues.
Thank you!!!
asdor said:
Hurray! Great. But I always used PowerShell for all my previous phones as well as for rooting my current Pixel 6 Pro and there were no issues.
Thank you!!!
Click to expand...
Click to collapse
You're welcome! Glad it's something easy. Me too (ADB/Fastboot used to work as is in PowerShell). I think Microsoft changed PowerShell enough over the last several years that made regular old commands require some extra characters typed before the commands to get them working.
Maybe it was a security enhancement to PowerShell so that if you're meaning to type a PowerShell command and there's an executable in the same folder by the same name as the PS command, then it's not accidentally running the executable instead, and makes you type extra characters since that's far less likely to be an accident.
There's also the wonderfully neat official Microsoft Terminal app in their store. You can have mix and match of Command Prompt and PowerShell in separate tabs in the same window. I think it has other features as well.
roirraW edor ehT said:
You're welcome! Glad it's something easy. Me too (ADB/Fastboot used to work as is in PowerShell). I think Microsoft changed PowerShell enough over the last several years that made regular old commands require some extra characters typed before the commands to get them working.
Maybe it was a security enhancement to PowerShell so that if you're meaning to type a PowerShell command and there's an executable in the same folder by the same name as the PS command, then it's not accidentally running the executable instead, and makes you type extra characters since that's far less likely to be an accident.
There's also the wonderfully neat official Microsoft Terminal app in their store. You can have mix and match of Command Prompt and PowerShell in separate tabs in the same window. I think it has other features as well.
Click to expand...
Click to collapse
In powershell:
./adb shell settings put global settings_provider_model false
./adb shell settings put secure sysui_qs_tiles "wifi,cell,$(settings get secure sysui_qs_tiles)"
bouchigo said:
In powershell:
./adb shell settings put global settings_provider_model false
./adb shell settings put secure sysui_qs_tiles "wifi,cell,$(settings get secure sysui_qs_tiles)"
Click to expand...
Click to collapse
Ah yes, thank you. dot forward-slash. dot forward-slash. Hopefully, I remember.
I hope someone finds a way to do this fro non-rooted 6 Pro
*** Please follow the laws and regulations of the corresponding country or region ***
thanks for @HarryShan
I'm not living in Japan and use other country SIM card always shutter sound.
Pixel 6 Pro has a Model ID GF5KQ for Japan
G8VOU for US
they are same hardware
changing Model ID can control Gcam shutter sound
Model ID storage in /dev/block/by-name/devinfo for pixel 6 and 6 pro
run a adb shell to changing or using terminal
1.shell into phone
adb shell
Click to expand...
Click to collapse
2.change to root
$su
Click to expand...
Click to collapse
3.copy devinfo to img
#dd if=/dev/block/by-name/devinfo of=/sdcard/devinfo.img
Click to expand...
Click to collapse
4.changing Model ID with hex editer
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
5.save and flash back
# dd if=/sdcard/Mod_devinfo.img of=/dev/block/by-name/devinfo
Click to expand...
Click to collapse
6.reboot and enjoy it.
In theory, it should be possible to use “fastboot flash devinfo xxx.img”
But it should be necessary to repackage the img file before .
Please tell me if there is a systemless method , thanks
This Is Why In Japan A Phone’s Camera Shutter Sound Cannot Be Muted
You know that annoying “passht” camera shutter sound your phone makes whenever you take a picture? Well, in Japan, you can’t mute it, not even if you switch to mute mode! Here’s why.
Back in early 2000, when Kyocera VP-210 was launched, Japan became the first country to sell camera equipped phones. These phones also had the ability to send photos via email (pretty astonishing for 2000, isn’t it?). When users started to get used to them and learned how to attach pictures to an email, a big problem started to emerge: as any citizen of a civilized society would do, people started using their camera to take up-skirt photos of women, especially in crowded places like trains!
By 2001, this was already a matter of online discussion and, because no legal provision has been taken by the government, wireless carriers took it upon themselves. In order to prevent secret filming and ensure privacy, carriers made it a requirement that all phones sold in Japan must be customized for the market so that all built-in cameras cannot be muted.
Phone producers and Japanese wireless carriers have cooperated ever since so that all phones make a distinct sound whenever you use the camera.
This Is Why In Japan A Phone's Camera Shutter Sound Cannot Be Muted
Tap on the pic to find out.
theuijunkie.com
@iCassius
You can use my Magisk module.
Basically you only need to "setprop audio.camerasound.force false" and overlay to disable force sound.
GitHub - AndroPlus-org/magisk-module-pixel6: Google Pixel 6シリーズ以降向けのMagiskモジュールです。
Google Pixel 6シリーズ以降向けのMagiskモジュールです。. Contribute to AndroPlus-org/magisk-module-pixel6 development by creating an account on GitHub.
github.com
miravision said:
This Is Why In Japan A Phone’s Camera Shutter Sound Cannot Be Muted
You know that annoying “passht” camera shutter sound your phone makes whenever you take a picture? Well, in Japan, you can’t mute it, not even if you switch to mute mode! Here’s why.
Back in early 2000, when Kyocera VP-210 was launched, Japan became the first country to sell camera equipped phones. These phones also had the ability to send photos via email (pretty astonishing for 2000, isn’t it?). When users started to get used to them and learned how to attach pictures to an email, a big problem started to emerge: as any citizen of a civilized society would do, people started using their camera to take up-skirt photos of women, especially in crowded places like trains!
By 2001, this was already a matter of online discussion and, because no legal provision has been taken by the government, wireless carriers took it upon themselves. In order to prevent secret filming and ensure privacy, carriers made it a requirement that all phones sold in Japan must be customized for the market so that all built-in cameras cannot be muted.
Phone producers and Japanese wireless carriers have cooperated ever since so that all phones make a distinct sound whenever you use the camera.
This Is Why In Japan A Phone's Camera Shutter Sound Cannot Be Muted
Tap on the pic to find out.
theuijunkie.com
Click to expand...
Click to collapse
while I'm not Japanese, I do find these articles somewhat annoying as they sort of paint a negative image of Japanese people in general. yeah, of course there are perverts in Japan that do this, but as many as there are Japanese perverts, there are that many if not more in other countries as well.
Do you know if this can be done to enable the mmWave on GLU0G European model?
Other question: updating firmware will not overwrite that memory block, right?
gpvecchi said:
Do you know if this can be done to enable the mmWave on GLU0G European model?
Click to expand...
Click to collapse
Idont think so ,These 2 versions should be different hardware scales
this partition will not flash with update package
it only record your mac addr bt addr and etc
so be careful
Yeah. It's a first world problem. When I try to take a picture of my kids while they're asleep the shutter awakens them. There are several camera apps in the store (s) that don't make the shutter sound if you're interested.
I'm thankful for the sound tbh. People at times try to record my kids on the trains( Japanese with natural blonde hair) usually I just tell them to stop and they do.
My kids aren't a tourist attraction for your amusement...
AndroPlus said:
@iCassius
You can use my Magisk module.
Basically you only need to "setprop audio.camerasound.force false" and overlay to disable force sound.
GitHub - AndroPlus-org/magisk-module-pixel6: Google Pixel 6シリーズ以降向けのMagiskモジュールです。
Google Pixel 6シリーズ以降向けのMagiskモジュールです。. Contribute to AndroPlus-org/magisk-module-pixel6 development by creating an account on GitHub.
github.com
Click to expand...
Click to collapse
how exactly to do this, sorry but i am a newbie
iCassius said:
*** Please follow the laws and regulations of the corresponding country or region ***
thanks for @HarryShan
I'm not living in Japan and use other country SIM card always shutter sound.
Pixel 6 Pro has a Model ID GF5KQ for Japan
G8VOU for US
they are same hardware
changing Model ID can control Gcam shutter sound
Model ID storage in /dev/block/by-name/devinfo for pixel 6 and 6 pro
run a adb shell to changing or using terminal
1.shell into phone
2.change to root
3.copy devinfo to img
4.changing Model ID with hex editer
View attachment 5467843
5.save and flash back
6.reboot and enjoy it.
View attachment 5467819
In theory, it should be possible to use “fastboot flash devinfo xxx.img”
But it should be necessary to repackage the img file before .
Please tell me if there is a systemless method , thanks
Click to expand...
Click to collapse
was able to the above but still the Camera Sound option still not appear in the Camera settings
noyalas said:
was able to the above but still the Camera Sound option still not appear in the Camera settings
Click to expand...
Click to collapse
it is now working, thanks @iCassius
iCassius said:
*** Please follow the laws and regulations of the corresponding country or region ***
thanks for @HarryShan
I'm not living in Japan and use other country SIM card always shutter sound.
Pixel 6 Pro has a Model ID GF5KQ for Japan
G8VOU for US
they are same hardware
changing Model ID can control Gcam shutter sound
Model ID storage in /dev/block/by-name/devinfo for pixel 6 and 6 pro
run a adb shell to changing or using terminal
1.shell into phone
2.change to root
3.copy devinfo to img
4.changing Model ID with hex editer
View attachment 5467843
5.save and flash back
6.reboot and enjoy it.
View attachment 5467819
In theory, it should be possible to use “fastboot flash devinfo xxx.img”
But it should be necessary to repackage the img file before .
Please tell me if there is a systemless method , thanks
Click to expand...
Click to collapse
I tried this method on my 6 pro and it's stuck in a bootloop! can anyone help me?
I tried to reinstall the stock rom again but fastboot is as far as I can get. I can't boot into fastbootd to complete the flashing process.
I still have the original devinfo.img and I don't know how to restore it using fastboot. I tried fastboot flash devinfo devinfo.img but I get file size error.
please help
unbricked my phone.
you should have added "bs=8192 count=1" to your dd command.
now because of your half baked guideeven though I unbricked, wifi isn't working.
mohamed.sakhiri said:
unbricked my phone.
you should have added "bs=8192 count=1" to your dd command.
now because of your half baked guideeven though I unbricked, wifi isn't working.
Click to expand...
Click to collapse
Try the Official Google Android Flash Tool (OEM Unlocking needs to be toggled on - you may not have to manually unlock the bootloader - the "site" will do that on its own). You may have to choose the option to Force Flash All Partitions, which will also wipe your phone.
roirraW edor ehT said:
Try the Official Google Android Flash Tool (OEM Unlocking needs to be toggled on - you may not have to manually unlock the bootloader - the "site" will do that on its own). You may have to choose the option to Force Flash All Partitions, which will also wipe your phone.
Click to expand...
Click to collapse
nope that did not work, unfortunately.
mohamed.sakhiri said:
nope that did not work, unfortunately.
Click to expand...
Click to collapse
I would pursue the warranty possibility ASAP, if you can. Then, if they let you RMA it, use the flash tool once more, but this time check the box for both Wipe and for Re-lock the Bootloader.
I apologize for the bad news.
roirraW edor ehT said:
I would pursue the warranty possibility ASAP, if you can. Then, if they let you RMA it, use the flash tool once more, but this time check the box for both Wipe and for Re-lock the Bootloader.
I apologize for the bad news.
Click to expand...
Click to collapse
Unfortunately I can't send it back even if they agree, custom fees are insane here.
Do you own a pixel 6 pro? If so, can you please send me a backup of your devinfo partition?
mohamed.sakhiri said:
Unfortunately I can't send it back even if they agree, custom fees are insane here.
Do you own a pixel 6 pro? If so, can you please send me a backup of your devinfo partition?
Click to expand...
Click to collapse
Right, I saw your post in the other thread. Like I said, you should stick to a single thread - now you've got three threads going about the subject.
No, I don't own a Pixel 6 Pro, my wife and I traded ours in, which Google received today.
mohamed.sakhiri said:
I tried this method on my 6 pro and it's stuck in a bootloop! can anyone help me?
I tried to reinstall the stock rom again but fastboot is as far as I can get. I can't boot into fastbootd to complete the flashing process.
I still have the original devinfo.img and I don't know how to restore it using fastboot. I tried fastboot flash devinfo devinfo.img but I get file size error.
please help
Click to expand...
Click to collapse
This partition is record of hardware information
So I think you did something wrong while modifying this partition
You can post the information about the failure when you flash the system partition
To facilitate better analysis of the reasons
In addition, if you stay on the google logo interface all the time,
you can check whether the computer system device currently has an adb or fastboot connection to confirm where the device boot stays.
iCassius said:
This partition is record of hardware information
So I think you did something wrong while modifying this partition
You can post the information about the failure when you flash the system partition
To facilitate better analysis of the reasons
In addition, if you stay on the google logo interface all the time,
you can check whether the computer system device currently has an adb or fastboot connection to confirm where the device boot stays.
Click to expand...
Click to collapse
It is solved by now.
[SOLVED] Bricked my Pixel 6 Pro
Hello, Today I messed up, I tried to change my Pixel 6 Pro's model from US version to global, so I edit the devinfo.img and pushed it successfully using adb, the same steps shared in some articles on xda. Now it won't boot again, it's stuck on...
forum.xda-developers.com
Here is my latest version of My Oneplus Tool . This tool can do almost everything for you. I have added a method to switch the Oem_Unlock switch on Sim locked devices. It will ungray the switch so you can flip it and bootloader unlock. It still has all the other tools like the engineer mode decrypt, to enable the app. Also lots of hidden SECRETS like every oneplus device has a hidden copy of busybox already installed . and this will access it. Plus this has a long list of dialer codes .There are lots of tools like scrcpy and a windows file explorer for your device. I have also added lots of fastboot adb commands. Please feel free to let me know if anything can be added. I been notifided this has been reported as a virus, it is only a .bat file converted to exe. please scan for yourself.
One+_TooL.7z | by Ju5t3nc4s3 for /e/OS supported models
Download GApps, Roms, Kernels, Themes, Firmware, and more. Free file hosting for all Android developers.
www.androidfilehost.com
Please donate for the cause.
Donate to Ju5t3nc4s3
Help support Ju5t3nc4s3 by donating or sharing with your friends.
www.paypal.com
I have now made this ungray method usless LoL I have a working method that lets u flash msm and boot direct to bootloader and unlock without the need for a oem unlock token from oneplus , even works if ur still sim locked.
any guidance？
better with an instruction。
thx for sharing。
Thank very much. This is awesome !
But like werichard559 said, better with instructions. Otherwise you will get Many Many Many questions....
its self explained in the tool. its just written in bash and packed with everything like adb tools into a exe.
has a menu with items.
Interesting, MS Windows and Linux?
galaxys said:
Interesting, MS Windows and Linux?
Click to expand...
Click to collapse
exe on linux? Nah, you could decompile and pull the scripts
Only reason for the exe is to have all the file together. Nice and neat.And unlike all the others that want you to post your IMEI to the NET to do the engineer mode decrypt . I wrote this so the decryption is done in shell on the phone.
Ju5t3nC4s3 said:
Only reason for the exe is to have all the file together. Nice and neat.And unlike all the others that want you to post your IMEI to the NET to do the engineer mode decrypt . I wrote this so the decryption is done in shell on the phone.
Click to expand...
Click to collapse
Engineer mode from dialer? Did you just script to edit the config file in mnt/vendor/persist/engineermode/engineermode_config ? We appreciate your work. Work smarter not harder
Zeus0fyork said:
Engineer mode from dialer? Did you just script to edit the config file in mnt/vendor/persist/engineermode/engineermode_config ? We appreciate your work. Work smarter not harder
Click to expand...
Click to collapse
To disable the incryption? ,and enable engineer mode? Yes the config is edited ,can only be done with root . Or a very long process. I released a shell command to do this few months back.It just uses a sed cmd. Now to generate the code on the device in shell to enter . That wasn't easy, had a heck of a time finding a cmd that would get the correct hash I needed for a crc32b . And to have it enter that code for u on the screen,it just had to be done. Lol . I have loads of dialer codes still I haven't added to the tool. A lot I'm not sure what they even do yet ,like *#632# no clue. There is a completely extra app that is also decrypted with the engineer mode. OpEngMode or TmoEngMode for TMobile.
This has all can together just from the data mining and the need for the tools for the reversing of the simlock . I been working on it now for some time and have discovered many other vulnerablitys. I have unlocked some devices,but never 1 the same. Before I released this I descoverd how to flip the oem_unlock switch under the greyed out area.and was able to unpack a msm download and mod to repack it. So after flash the switch is on. By 1 bit I found in one of the partitions. Recently I have located some code just like the engineer mode qr for the sim unlock. And there is a couple RSA private keys with it.I also located a dialer code to skip setupwizard. And another code that gives u all USB access like adb ,diag , all with out verification.
Ju5t3nC4s3 said:
This has all can together just from the data mining and the need for the tools for the reversing of the simlock . I been working on it now for some time and have discovered many other vulnerablitys. I have unlocked some devices,but never 1 the same. Before I released this I descoverd how to flip the oem_unlock switch under the greyed out area.and was able to unpack a msm download and mod to repack it. So after flash the switch is on. By 1 bit I found in one of the partitions. Recently I have located some code just like the engineer mode qr for the sim unlock. And there is a couple RSA private keys with it.I also located a dialer code to skip setupwizard. And another code that gives u all USB access like adb ,diag , all with out verification.
Click to expand...
Click to collapse
what u mean by 'some code just like the engineer mode qr for the sim unlock'
now iam having touble to sim unlock my TMO OP9,could u pls help me out?
There is no method to sim_unlock other then official service.
Ju5t3nC4s3 said:
There is no method to sim_unlock other then official service.
Click to expand...
Click to collapse
oh,really sad to hear that.
still merry christmas.
thx for ur shares.
I have been working on reversing the OnePlus sim_lock now for over a year. Every device after the Op6 they made a change that if you erase the efs to reset it, You will lose total access to the sim card. It looks to be a key needed by the sim in the SFS path , same location as the simlock fuse.
Ju5t3nC4s3 said:
Here is my latest version of My Oneplus Tool . This tool can do almost everything for you. I have added a method to switch the Oem_Unlock switch on Sim locked devices. It will ungray the switch so you can flip it and bootloader unlock. It still has all the other tools like the engineer mode decrypt, to enable the app. Also lots of hidden SECRETS like every oneplus device has a hidden copy of busybox already installed . and this will access it. Plus this has a long list of dialer codes .There are lots of tools like scrcpy and a windows file explorer for your device. I have also added lots of fastboot adb commands. Please feel free to let me know if anything can be added.
Downloads for : OnePlus /e/OS supported models | AndroidFileHost.com | Download GApps, Roms, Kernels, Themes, Firmware and more. Free file hosting for all Android developers.
Download GApps, Roms, Kernels, Themes, Firmware, and more. Free file hosting for all Android developers.
www.androidfilehost.com
Click to expand...
Click to collapse
What problem can be? androidfilehost said no mirrors found/ ((((
I'll upload to Gdive in a bit also. Android file host does this. Lots of time u just need to wait a bit to get it to work.
Ju5t3nC4s3 said:
I'll upload to Gdive in a bit also. Android file host does this. Lots of time u just need to wait a bit to get it to work.
Click to expand...
Click to collapse
I will be glad to Gdrive link. I waited all day, got to the computer. And hosting broke me off. lol
P
020982 said:
I will be glad to Gdrive link. I waited all day, got to the computer. And hosting broke me off. lol
Click to expand...
Click to collapse
One+_TooL.exe
drive.google.com
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Still sim locked and no unlock.bin, thank you good sir
? What are u trying to show ,,u can check the sim lock in *#808#.