Question QPST - EFS File Explorer - Anyone got it working

Search This thread
Nov 28, 2021
31
7
Hello,
I was wondering if anyone has managed to get this working on the Realme GT as I wanted to look at the carrier policy for my phone, as i've edited the oneplus one successfully.
But was having issues on this one, doesn't seem to recognise the phone to connect to EFS.
 

joebrit

Senior Member
Jul 13, 2012
73
19
Xiaomi Poco F3
Realme GT
Yes. I got it working (on c15 eu). I was testing the same method I used on my poco f3 and it works the same way.

I'm assuming you're rooted.

If so, while usb debugging and usb transfer files mode are on , use the commands:

adb shell su setprop sys.usb.config diag,diag_mdm,adb

This should create two new entries in device manager with a yellow icon (faulty driver). You now need to update the driver. The best way of explaining this is to link to a youtube video. It's in turkish and for the mi10t but it works for other phones. Here it is at the correct timestamp. But written in steps it's:

Right click on the device and update driver.
Browse my computer for drivers.
Pick from a list of available drivers from my computer.
Ports (COM and LPT)
"qualcomm incorporated" and "qualcomm hs-usb android diag 9022".

Do this for both entries. They should now both be named something like "qualcomm hs usb diag 9022 (COM6)" in the ports (COM & LTP) section in device manager (each has a different port number for me).

Anyway, after that, the phone shows up in qpst.
Good luck.
 
Last edited:
Nov 28, 2021
31
7
Yes. I got it working (on c15 eu). I was testing the same method I used on my poco f3 and it works the same way.

I'm assuming you're rooted.

If so, while usb debugging and usb transfer files mode are on , use the commands:

adb shell su setprop sys.usb.config diag,diag_mdm,adb

This should create two new entries in device manager with a yellow icon (faulty driver). You now need to update the driver. The best way of explaining this is to link to a youtube video. It's in turkish and for the mi10t but it works for other phones. Here it is at the correct timestamp. But written in steps it's:

Right click on the device and update driver.
Browse my computer for drivers.
Pick from a list of available drivers from my computer.
Ports (COM and LPT)
"qualcomm incorporated" and "qualcomm hs-usb android diag 9022".

Do this for both entries. They should now both be named something like "qualcomm hs usb diag 9022 (COM6)" in the ports (COM & LTP) section in device manager (each has a different port number for me).

Anyway, after that, the phone shows up in qpst.
Good luck.
Worked perfectly. Thanks. Have you played about to unlock any bands?
 

joebrit

Senior Member
Jul 13, 2012
73
19
Xiaomi Poco F3
Realme GT
Worked perfectly. Thanks. Have you played about to unlock any bands?
No. I haven't tried anything qpst wise with my gt yet. I'm not an expert but I thought you could only activate new bands if the hardware shipped with them enabled but there's an artificial carrier based policy/limitation that qpst could change. I think there's guides out there...

My interest was in locking my phone to a certain tower (pci) for better speeds. Unfortunately, I tried this on my poco f3 a while ago but it didn't work. I used these instructions.

I basically created a file in efs explorer (nv/item_files/modem/lte/rrc/csp/pci_lock)
with the pci hex code inside but it didn't have the right effect. I think that nv item might be outdated.
 
Last edited:
Nov 28, 2021
31
7
Yeah the only PCI band locking apps, I've seen are really expensive paid ones, so it can be done somehow.
Network signal guru does band locking and PCI locking on the paid version of the app.
Would be interested in knowing if you actually get it working.
 

joebrit

Senior Member
Jul 13, 2012
73
19
Xiaomi Poco F3
Realme GT
Would be interested in knowing if you actually get it working.
Use the following at your own risk. Make a backup of your efs in qpst (start clients, software download, backup). Having said that, I've used this method successfully to lock the pci and earfcn. It relies on an nv item file:

/nv/item_files/modem/lte/rrc/efs/cell_restrict_opt_params

Navigate to:

/nv/item_files/modem/lte/rrc/efs/

If there is already a file called cell_restrict_opt_params you can make a backup and delete it as we will be replacing it.

Note down your desired earfcn and pci. I'll use earfcn = 500 and pci = 600 as an example.

Go to this hex converter and convert the earfcn and pci values (earfcn = 01F4 and pci = 0258).

Now create a hex file called cell_restrict_opt_params (you can use this program) in the following format:

01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 01 00 00 58 02 00 00 00 00 00 00 00 00 00 00

It should be 36 bytes. The 21st and 22nd byte should be the earfcn hex (backwards) with the 25th and 26th bytes being the pci hex (backwards). You can then transfer the file from your pc to the efs folder.

If you want to lock the earfcn only, it's the following format:

01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 01 00 00 F4 01 00 00

You will probably have to restart for the changes to take effect. Delete the file if you want to go back to the original state.

Good Luck.
 
Last edited:
  • Like
Reactions: intheb0x

gogocat

Member
Aug 6, 2023
5
1
Use the following at your own risk. Make a backup of your efs in qpst (start clients, software download, backup). Having said that, I've used this method successfully to lock the pci and earfcn. It relies on an nv item file:

/nv/item_files/modem/lte/rrc/efs/cell_restrict_opt_params

Navigate to:

/nv/item_files/modem/lte/rrc/efs/

If there is already a file called cell_restrict_opt_params you can make a backup and delete it as we will be replacing it.

Note down your desired earfcn and pci. I'll use earfcn = 500 and pci = 600 as an example.

Go to this hex converter and convert the earfcn and pci values (earfcn = 01F4 and pci = 0258).

Now create a hex file called cell_restrict_opt_params (you can use this program) in the following format:

01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 01 00 00 58 02 00 00 00 00 00 00 00 00 00 00

It should be 36 bytes. The 21st and 22nd byte should be the earfcn hex (backwards) with the 25th and 26th bytes being the pci hex (backwards). You can then transfer the file from your pc to the efs folder.

If you want to lock the earfcn only, it's the following format:

01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 01 00 00 F4 01 00 00

You will probably have to restart for the changes to take effect. Delete the file if you want to go back to the original state.

Good Luck.
thanks, i can lock 4g earfcn and pci using cell_restrict_opt_params. I want to know how to lock 5g earfcn and pci. thanks very much.
 

h2olove

Senior Member
Nov 14, 2016
118
60
taipei
Samsung Galaxy Note 10+
what is QPST EFS Explorer " reset phone " ?
Screenshot 2023-08-27 224836.png
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Would be interested in knowing if you actually get it working.
    Use the following at your own risk. Make a backup of your efs in qpst (start clients, software download, backup). Having said that, I've used this method successfully to lock the pci and earfcn. It relies on an nv item file:

    /nv/item_files/modem/lte/rrc/efs/cell_restrict_opt_params

    Navigate to:

    /nv/item_files/modem/lte/rrc/efs/

    If there is already a file called cell_restrict_opt_params you can make a backup and delete it as we will be replacing it.

    Note down your desired earfcn and pci. I'll use earfcn = 500 and pci = 600 as an example.

    Go to this hex converter and convert the earfcn and pci values (earfcn = 01F4 and pci = 0258).

    Now create a hex file called cell_restrict_opt_params (you can use this program) in the following format:

    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 01 00 00 58 02 00 00 00 00 00 00 00 00 00 00

    It should be 36 bytes. The 21st and 22nd byte should be the earfcn hex (backwards) with the 25th and 26th bytes being the pci hex (backwards). You can then transfer the file from your pc to the efs folder.

    If you want to lock the earfcn only, it's the following format:

    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 01 00 00 F4 01 00 00

    You will probably have to restart for the changes to take effect. Delete the file if you want to go back to the original state.

    Good Luck.