MTK IMEI Switcheroo (thingamabob)

Change IMEI - two options:

  • live patch (with root)
  • patch nvdata directly and flash

I’m giving out jobs without asking before, it’s good pay, nada. But it’s great nada, best around.

@flipphoneguy Want to make a termux version? One liner curl, prompt for imei and reboot kinda style?

@sh7411usa Don’t think I didn’t notice that yuri keybox powershell translation :rofl: Wanna make a Windows batch file?

And if anyone wants to make an app, should be super easy with the docs/ folder in the repo.

Enjoy :slight_smile:

5 Likes

Wow, cool stuff!

1 Like

windows bat wen

I’m looking over the code now. That’s going to be a very secret AES key now that its posted in plaintext on github. :rofl:

1 Like

the python tool is cross platform?, i only need to translate the bash?

I would assume so.

@flipphoneguy

Better luck for them next time. Not so secret though haha

I want to try with a tiq m5 next.

Did the draft, I have to wait to test it though, not near my qins now.

4 Likes

This is a fun read:

Sure! Should require python in termux or just rewrite everything in a bash script for termux?

Btw it’s amazing!! I love it! And the docs are also very good!

1 Like

K I made the pr.

I also created an app!! Lightweight (33kb!!) fast… Check it out

direct download latest version

All credit is to @ars18. He did the reverse engineering and everything. Translating his masterpiece python to Java is trivial

Edit: I forgot to mention. I was able to test both the termux pr and the app from my qin f25 which apparently uses the same encryption for the IMEI. I wonder how many other phones are like it

7 Likes

Thanks! Nice work :slight_smile:

So tests were all done only on f25? And the tool works completely there too? That would be great.

If yeah I’ll wait to merge till I test.

Maybe I should rename the repo so we can keep adding support for more.

F25 is single sim right?

Also, should work if live patch did, but can you test if off device patching and fastboot flash?

1 Like

I only tested the LD0B_001 and only on device. I don’t think I should test more cus it’ll fail. The f25 is dual sim which means the firmware is probably setup differently. The only thing that is the same is the path and the file LD0B_001. It only changed sim 1 and keeps SIM 2 untouched.

1 Like

Send me nvdata I can add support potentially for imei2.

and md1img

1 Like

I just checked myself. (I can send it you still want)
As you wrote ony the docs, block #2 is untouched by your tool. On this phone (probably also on any 2 sim MT67xxx) the second block is copy paste of the first 1 for sim 2. You can easily add to your code to check if block 2 is padding or a second sim and if a second sim let the user choose how many of them to edit…

2 Likes

Yeah I originally had “support” for imei2 I just took it out because I couldn’t test it. Shouldn’t be hard.

1 Like

Should I add it?

If you test 100 percent in all functions forsure!

I’m gonna have to rename the repo

1 Like

Or you can. whatever. Shouldn’t affect the termux wrapper though. I think you can merge it whatever

1 Like