[ONE General] sylentprofet:
The plot thickens....

[MENTION=5061839]Albirew[/MENTION] [MENTION=4258980]devilsshadow[/MENTION] [MENTION=5733862]BlackSoulxxx[/MENTION] [MENTION=5353566]fffft[/MENTION]

--- copied with permission from nathanpfry.com ---

After some exploration, more information has surfaced. For anyone in need of an unofficial 12.1 nightly to do testing, here's the one I've been using.

Enable Developer Options, then enable Advanced Reboot, Root Access for Apps and ADB, disable Update Cyanogen recovery (it sucks, use TWRP or Philz Touch), enable Android Debugging and Local terminal (it's handy)

Thanks [MENTION=265575]fards[/MENTION] for pointing out the EngineerMode on OxygenOS.

I flashed OxygenOS to both ChinaMobile and Intl - one thing that jumped out was a difference at the bottom of EngineerMode. Under RF_Version:

ChinaMobile: TDD_FDD_Ch_M

Intl: TDD_FDD_Am_M

By the looks of it, this is pulling a value from getprop ro.rf_version = "XXX" - a value unique to OxygenOS, does not appear in CM12.1

Where it's pulling this value from is the important question, ie how it knows what type of phone it's on (CM/Intl) despite using the same flashable zip (oxygenos_v1.0.0)

Nova Launcher's Activities Widget lists over 180 "EngineerMode" options to choose from. If you long-press on each one, you can explore the menu without needing to create a shortcut icon. Not all of them appear to function properly, some functions require a "password", and some parts are still in Chinese (more on that in a second).

Most notably:

LanguageSwitchToEnglishActivity - handy if you don't speak Chinese, although it doesn't seem to completely change some important parts, like certain Logging buttons (ahem)

network.BandMode and BandMode2

EngineeringMode - The primary Engineering Mode menu, though not all options from Activities appear to be immediately accessible

network.NetWorkSet

qualcomm.QualcommActivity

qualcomm.QualcommNV and NV2

qualcomm.DiagEnabled - Also available by dialing *#801#, can toggle Engineer Mode, Serial, Full port switch, and Rndis,diag switch. Apparently has the same effect as setprop sys.usb.config diag,adb - convenient

qualcomm.LogSwitch

manualtest.ContactorTest

qualcomm.DeviceLog

manualtest.LTEDivAntTest

manualtest.ManualTest - Available from EngineerMode, contains all manual tests available *#808#

ADB Mode ? - *#8958378#

Regarding the updated version of QPST et al:

Under QPST Configuration, once the phone is in diagnostic mode (listed as MSM8974), the Start Clients menu has a few selections:

- EFS Explorer

- The ChinaMobile uniquely has a folder named "policyman". This folder DOES NOT exist on the Intl model. I have confirmed that this is on the modemst partition. Flashing an EFS backup of the Intl to the ChinaMobile (modemst1 and 2) results in No SIM, Unknown IMEI - however, policyman is absent.

Inside policyman:

- carrier_policy.xml : VERY INTERESTING LINES re: disabling functionality in certain markets Here's a pastebin

- device_config

- rat_mast

- ue_mode

- The folder restores itself and the contents after reboot if either are deleted, despite having Attributes that would indicate otherwise (-AD)

- Service Programming

- Under the UMTS tab, the ChinaMobile version is missing the W-1700 checkbox compared to the Intl model.

- Attempting to check the box and write to phone results in error: NV_UE_IMEI_I - NV_READONLY_S

- Software Download

- Can apparently perform QCN backup and restore.

Separately available from the Start Menu folder QPST:

- eMMC Software Download : Very similar to the Chinese "unbrick" tools mentioned on other sites, notably MSM Downloader included with ColorOS and nubia ToolStudio 4.6.56 (the whole world hates you and your passworded files androidbrick.com guy... I fight for justice!)

- Memory Debug

- QCNView : If you perform QCN backups with the Software Download, this can be used to view them. No editing

- RF NV Manager : Mentioned before, only lists items relevant to RF_NV values, the first ~6000 or so, give or take.

Gonna keep chipping away at it. There's bound to be a way to get Band 4 and 17 working! Good luck everyone!