• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

Modify Radio and Modem IMG for VoLTE

Search This thread

devsx

Senior Member
Sep 5, 2016
76
46
I would like to edit the Radio and Modem IMG files on the my Pixel XL 2 to enable VoLTE for my carrier which is not officially supporting VoLTE. I alrady know which files I have to edit (from the Pixel XL 1), but I don't know how to open and edit the IMG files, because for the Pixel XL 2 this is required.

Does anyone knwo how to do it?

Additonal Info:
There's a mcfg_sw.mbn file under /vendor/mbn/mcfg/configs/mcfg_sw/generic/common/WildCard/WildCard/mcfg_sw.mbn which inlcudes the Qualcomm NV Item settings which define the chipset settings which are loaded based on the inserted SIM. The default mcfg_sw.mbn file does not include VoLTE support, the mcfg_sw.mbn file for Deutsche Telekom, Vodafone UK & DE, T-Mobile US does. On the Pixel XL 1 it was enough to copy the Deutsche Telekom mcfg_sw.mbn file to the generic folder and VoLTE was working. On the Pixel XL 2 this is not working, because the mcfg_sw.mbn files are again copied from firmware/images at every boot and therefore the generic folder is overwritten. Now I'm looking for a way to bypass this. Contact me at [email protected] if you like to work on this with me.

Btw: I'm a VoLTE / IMS engineer with dedicated knowhow.
 
Last edited:

CyberpodS2

Senior Member
Mar 27, 2012
2,814
1,240
NE Pennsylvania Boonies
I would like to edit the Radio and Modem IMG files on the my Pixel XL 2 to enable VoLTE for my carrier which is not officially supporting VoLTE. I alrady know which files I have to edit (from the Pixel XL 1), but I don't know how to open and edit the IMG files, because for the Pixel XL 2 this is required.

Does anyone knwo how to do it?
I have no idea how to do what your are asking but one thing I would do is research if the files are encrypted and or signed in a way that might destroy them if messed with. Hopefully they would just fail to flash but what if they don't fail but cause an UNfixable bootloop or whatever... again I have no idea at all but my paranoia dictates finding out more before trying it. Lol
 

npjohnson

Recognized Developer
I would like to edit the Radio and Modem IMG files on the my Pixel XL 2 to enable VoLTE for my carrier which is not officially supporting VoLTE. I alrady know which files I have to edit (from the Pixel XL 1), but I don't know how to open and edit the IMG files, because for the Pixel XL 2 this is required.

Does anyone knwo how to do it?

You can't. Changing the Modem partitions on any QCOM device (except HTC devices that are S-OFF) will result in a permanent brick regardless of their unlock status.

Don't do it.
 

devsx

Senior Member
Sep 5, 2016
76
46
I don't think that there's a high risk to brick the phone with just modding the radio and modem partition. Because the radio was once notbworking on my Pixel XL 2, because I edited some files with es file explorer and after that I just flashed the radio and modem again and it was working fine again.
 

LLStarks

Senior Member
Jun 1, 2012
1,590
608
I'd wait for a userdebug rom for the phone and then poke around in QPST/QXDM. Replacing and editing files at the filesystem level won't work.
 

TEEEEEEEEED

Senior Member
Aug 27, 2016
51
13
Mod the /firmware/radio folder directly. This didn't cause any problem on my Pixel 1 XL if flashed the factory image again.

EDIT: I don't have a Pixel 2 so I don't know where modem is mounted. Please search for it by yourself
 
Last edited:

frap129

Inactive Recognized Developer
Jan 6, 2013
1,392
4,124
I would like to edit the Radio and Modem IMG files on the my Pixel XL 2 to enable VoLTE for my carrier which is not officially supporting VoLTE. I alrady know which files I have to edit (from the Pixel XL 1), but I don't know how to open and edit the IMG files, because for the Pixel XL 2 this is required.

Does anyone knwo how to do it?

Additonal Info:
There's a mcfg_sw.mbn file under /vendor/mbn/mcfg/configs/mcfg_sw/generic/common/WildCard/WildCard/mcfg_sw.mbn which inlcudes the Qualcomm NV Item settings which define the chipset settings which are loaded based on the inserted SIM. The default mcfg_sw.mbn file does not include VoLTE support, the mcfg_sw.mbn file for Deutsche Telekom, Vodafone UK & DE, T-Mobile US does. On the Pixel XL 1 it was enough to copy the Deutsche Telekom mcfg_sw.mbn file to the generic folder and VoLTE was working. On the Pixel XL 2 this is not working, because the mcfg_sw.mbn files are again copied from firmware/images at every boot and therefore the generic folder is overwritten. Now I'm looking for a way to bypass this. Contact me at [email protected] if you like to work on this with me.

Btw: I'm a VoLTE / IMS engineer with dedicated knowhow.

So lets start with this. Does your carriers VoLTE use bands that aren't available on the pixel 2? If the answer to that is no, which it probably is, then you dont have to do to modify the radio or modem. You will either need a custom ROM, an OMS overlay, or magisk to do this. VoLTE assigment isnt done by the radio or modem, it is done by the CarrierConfig app. You can use magisk and get the VoEnabler module (or use root to force enable VoLTE with the same props), you can follow https://github.com/CarbonBeta/android_device_google_wahoo/commit/0e38da5af4a93be834347bfe535ae231154530df and force enable it for your carrier (find the config that matches the MCC and MNC of your carrier) and build your own custom rom with the change, or submit it to lineage/carbon/whatever and they will probably merge it. You can also change this value by creating an OMS overlay (formerly RRO, the backend that substratum uses), and install it on any rom, however this may or may not work as android blocks overlays with signatures that don't match the system platform.
 
  • Like
Reactions: ZION959

abuttino

Senior Member
Sep 12, 2006
2,222
411
I would like to edit the Radio and Modem IMG files on the my Pixel XL 2 to enable VoLTE for my carrier which is not officially supporting VoLTE. I alrady know which files I have to edit (from the Pixel XL 1), but I don't know how to open and edit the IMG files, because for the Pixel XL 2 this is required.

Does anyone knwo how to do it?

Additonal Info:
There's a mcfg_sw.mbn file under /vendor/mbn/mcfg/configs/mcfg_sw/generic/common/WildCard/WildCard/mcfg_sw.mbn which inlcudes the Qualcomm NV Item settings which define the chipset settings which are loaded based on the inserted SIM. The default mcfg_sw.mbn file does not include VoLTE support, the mcfg_sw.mbn file for Deutsche Telekom, Vodafone UK & DE, T-Mobile US does. On the Pixel XL 1 it was enough to copy the Deutsche Telekom mcfg_sw.mbn file to the generic folder and VoLTE was working. On the Pixel XL 2 this is not working, because the mcfg_sw.mbn files are again copied from firmware/images at every boot and therefore the generic folder is overwritten. Now I'm looking for a way to bypass this. Contact me at [email protected] if you like to work on this with me.

Btw: I'm a VoLTE / IMS engineer with dedicated knowhow.
I have tried editing Verizon's .mbn file with a hex editor and used Magisk to replace the file at boot time to enable WiFi Preferred Calling, it doesn't work. I also took out my SIM card, activated fi, then put my SIM back in, that didn't work (with the file edited).

So, if you spot something in QPST, please let me know, I really would like to figure this out for the community and myself.

What did you use to extract the img? I would love to do it at a radio level instead. F-Verizon!

Sent from my Pixel 3 XL using Tapatalk
 

seardna

Member
May 8, 2016
12
1
I need volte profile for China Unicom too.Ims status is not registered.
Just add a specific profile or parameters like at&t's ?
 

lijun0326

New member
Oct 18, 2016
3
0
I tried the mbn trick but it doesn't works on my Pixel xl. I even tried to remove entire mcfg_sw folder under /data and /firmware, but the LTE still works. BTW I sent you an email months ago but no reply

---------- Post added at 05:31 PM ---------- Previous post was at 05:27 PM ----------

I need volte profile for China Unicom too.Ims status is not registered.
Just add a specific profile or parameters like at&t's ?

You need to get one from any Chinese phones which supports CU VoLTE. Apart from this, you need to call 10010 to activate VoLTE for your SIM card. At last, you need to comfirm the city you live have VoLTE coverage.
 

onesolo

Senior Member
Apr 18, 2006
2,548
216
Nexus 7 (2013)
Google Nexus 5
Can someone help me to get VoLTE work on my Pixel XL ?? I have VoLTE working fine with my mobile number (works fine on a Xiaomi Mi A2 Lite and on a Nokia 6.1), but can't seem to work on my Pixel XL, even after trying almost (except modifying radio/modem for example) anything, magisk buildprop etc... my IMS status is not registered.
 
  • Like
Reactions: The War Profiteer

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    I would like to edit the Radio and Modem IMG files on the my Pixel XL 2 to enable VoLTE for my carrier which is not officially supporting VoLTE. I alrady know which files I have to edit (from the Pixel XL 1), but I don't know how to open and edit the IMG files, because for the Pixel XL 2 this is required.

    Does anyone knwo how to do it?

    Additonal Info:
    There's a mcfg_sw.mbn file under /vendor/mbn/mcfg/configs/mcfg_sw/generic/common/WildCard/WildCard/mcfg_sw.mbn which inlcudes the Qualcomm NV Item settings which define the chipset settings which are loaded based on the inserted SIM. The default mcfg_sw.mbn file does not include VoLTE support, the mcfg_sw.mbn file for Deutsche Telekom, Vodafone UK & DE, T-Mobile US does. On the Pixel XL 1 it was enough to copy the Deutsche Telekom mcfg_sw.mbn file to the generic folder and VoLTE was working. On the Pixel XL 2 this is not working, because the mcfg_sw.mbn files are again copied from firmware/images at every boot and therefore the generic folder is overwritten. Now I'm looking for a way to bypass this. Contact me at [email protected] if you like to work on this with me.

    Btw: I'm a VoLTE / IMS engineer with dedicated knowhow.
    3
    You can't. Changing the Modem partitions on any QCOM device (except HTC devices that are S-OFF) will result in a permanent brick regardless of their unlock status.

    Don't do it.

    Wrong... My LG aristo isn't bricked and I'm messing with those files now too trying to bypass a network lock, but the point is , aristo is qualcomm and i'm not bricked...
    also the method I am using is to copy the modem partition with DD
    Code:
    adb shell
    Code:
     su
    Code:
     dd if=path/to/modem/partition of=/sdcard/modem.img
    then using a ubuntu machine and adb...
    i pulled the image to the p.c mounted it like so ...
    Code:
     sudo su
    Code:
     mkdir /my_modem
    Code:
     mount modem.img /my_modem
    Code:
     nautilus /my_modem
    and at this point I have access to read/change all the files after making my changes i test them by the following process... I first boot the phone to TWRP then use adb to push the file (modem.img) that I modded back to sdcard, then use DD and overwrite the partition with the modded image...
    it has to be done from recovery though as when booted to regular androidOS even with root DD will fail and give you a (permission denied) message...
    perhaps this info will help someone out there, But my point is that You are absolutely WRONG about your comment on producing a Brick.
    By the way I do have the bootloader unlocked too so perhaps that is why it doesn't brick...
    1
    I would like to edit the Radio and Modem IMG files on the my Pixel XL 2 to enable VoLTE for my carrier which is not officially supporting VoLTE. I alrady know which files I have to edit (from the Pixel XL 1), but I don't know how to open and edit the IMG files, because for the Pixel XL 2 this is required.

    Does anyone knwo how to do it?

    Additonal Info:
    There's a mcfg_sw.mbn file under /vendor/mbn/mcfg/configs/mcfg_sw/generic/common/WildCard/WildCard/mcfg_sw.mbn which inlcudes the Qualcomm NV Item settings which define the chipset settings which are loaded based on the inserted SIM. The default mcfg_sw.mbn file does not include VoLTE support, the mcfg_sw.mbn file for Deutsche Telekom, Vodafone UK & DE, T-Mobile US does. On the Pixel XL 1 it was enough to copy the Deutsche Telekom mcfg_sw.mbn file to the generic folder and VoLTE was working. On the Pixel XL 2 this is not working, because the mcfg_sw.mbn files are again copied from firmware/images at every boot and therefore the generic folder is overwritten. Now I'm looking for a way to bypass this. Contact me at [email protected] if you like to work on this with me.

    Btw: I'm a VoLTE / IMS engineer with dedicated knowhow.

    So lets start with this. Does your carriers VoLTE use bands that aren't available on the pixel 2? If the answer to that is no, which it probably is, then you dont have to do to modify the radio or modem. You will either need a custom ROM, an OMS overlay, or magisk to do this. VoLTE assigment isnt done by the radio or modem, it is done by the CarrierConfig app. You can use magisk and get the VoEnabler module (or use root to force enable VoLTE with the same props), you can follow https://github.com/CarbonBeta/android_device_google_wahoo/commit/0e38da5af4a93be834347bfe535ae231154530df and force enable it for your carrier (find the config that matches the MCC and MNC of your carrier) and build your own custom rom with the change, or submit it to lineage/carbon/whatever and they will probably merge it. You can also change this value by creating an OMS overlay (formerly RRO, the backend that substratum uses), and install it on any rom, however this may or may not work as android blocks overlays with signatures that don't match the system platform.
    1
    Can someone help me to get VoLTE work on my Pixel XL ?? I have VoLTE working fine with my mobile number (works fine on a Xiaomi Mi A2 Lite and on a Nokia 6.1), but can't seem to work on my Pixel XL, even after trying almost (except modifying radio/modem for example) anything, magisk buildprop etc... my IMS status is not registered.
    1
    Wrong... My LG aristo isn't bricked and I'm messing with those files now too trying to bypass a network lock, but the point is , aristo is qualcomm and i'm not bricked...
    also the method I am using is to copy the modem partition with DD
    Code:
    adb shell
    Code:
     su
    Code:
     dd if=path/to/modem/partition of=/sdcard/modem.img
    then using a ubuntu machine and adb...
    i pulled the image to the p.c mounted it like so ...
    Code:
     sudo su
    Code:
     mkdir /my_modem
    Code:
     mount modem.img /my_modem
    Code:
     nautilus /my_modem
    and at this point I have access to read/change all the files after making my changes i test them by the following process... I first boot the phone to TWRP then use adb to push the file (modem.img) that I modded back to sdcard, then use DD and overwrite the partition with the modded image...
    it has to be done from recovery though as when booted to regular androidOS even with root DD will fail and give you a (permission denied) message...
    perhaps this info will help someone out there, But my point is that You are absolutely WRONG about your comment on producing a Brick.
    By the way I do have the bootloader unlocked too so perhaps that is why it doesn't brick...

    >My LG aristo

    There's your answer dude. Cheap LG phones don't have QCOM Secure Boot turned on. Try this on a Pixel, and you will most certainly brick your device.