Database Info

Qualcomm mdm6600 (GOBI) AT Commands

This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.

That's awesome, man! Hopefully it works when you test it tomorrow. Good luck

jwells777 said:
This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.
Click to expand...
Click to collapse
I am the OP of the thread you referred to, the one about the Qualcomm modem commands. I am very pleased that you were able to use that information to achieve the enabling of other cell radio bands which the modem is capable of but were not available for use. I tried too and was partially successful but not to the point of enabling the recognition of cell service providers which operate on those other bands. I hope that you have succeeded in achieving full operation of the 850 and 1900 MHz UMTS bands which will enable owners of the G2X/P999 phones to connect to networks which use those bands. I am looking forward to your next post.

Core Memory said:
I am the OP of the thread you referred to, the one about the Qualcomm modem commands. I am very pleased that you were able to use that information to achieve the enabling of other cell radio bands which the modem is capable of but were not available for use. I tried too and was partially successful but not to the point of enabling the recognition of cell service providers which operate on those other bands. I hope that you have succeeded in achieving full operation of the 850 and 1900 MHz UMTS bands which will enable owners of the G2X/P999 phones to connect to networks which use those bands. I am looking forward to your next post.
Click to expand...
Click to collapse
If I am understanding correctly, this would allow G2x phones to work with the new T-Mobile LTE 1900 Mhz signal, correct? Or am I way off base?

I believe it's AT&t's networks

jcbofkc said:
If I am understanding correctly, this would allow G2x phones to work with the new T-Mobile LTE 1900 Mhz signal, correct? Or am I way off base?
Click to expand...
Click to collapse
No. The LTE capability is not part of the Qualcomm mdm6600.
http://en.wikipedia.org/wiki/Qualcomm_Gobi
MDM6600™:
Multi-mode modem
HSPA+ with data rates of up to 14.4 Mbit/s
CDMA2000® 1xEV-DO Rev. A/Rev. B support
GPS functionality, including support for Assisted GPS

Since he hasn't posted anything since, it probably didn't succeed. I also sent him a PM which he didn't reply to.
jwells777 said:
This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.
Click to expand...
Click to collapse

Unfortunately, as suggested by Core Memory above, I have not been completely successful in this investigation; however, I will post what I discovered along the way for the benefit of others. Perhaps someone else can pickup where I left off and get things working.
First, a summary of the final status:
1) Updated NV Items to enable 850 MHz and 1900 MHz bands
2) Was able to see 850 MHz UMTS providers under the "Search Available Networks"
3) It appeared that a connection was being made to the UMTS provider based upon both the signal strength monitor in "About phone" and the Engineering Mode page that provides data regarding 3g connections
4) In the Engineering Mode page, it seemed that the device was trying to connect (login?) to the network but was not being successful with the login
5) When at the lock screen and forcing the connection to the 850 MHz UMTS network, the "Emergency Only" text appears further suggesting that the connection is working but that my configuration for the network may be wrong.
6) No 1900 MHz providers ever appeared in the network lists while searching. I am not sure whether this is because this band was not functioning or if it was because no such provider existed since I am not terribly familiar with the coverage where I am currently at.
For those who wish to follow this path and test in their own local markets, please see the following steps required to reach this point:
Tools needed:
1) QPST 2.7 (Build 366 or later)
2) QXDM 3.12.714 (or later)
Steps:
1) Install necessary tools on your computer.
2) Enable USB debugging (Settings-->Applications-->Development)
3) Connect phone to PC
4) In the hidden menu (1809#*999#), ensure that Port Setting is configured to CP USB.
5) Launch QPST Configuration
6) Under Ports, select Add New Port.
7) Locate your device and enable the port. (NOTE: There may be two ports available to you here. I believe that you want to use the one that is for Serial / USB/QC connections.
8) From QPST Configuration, launch the "Software Download" tool under the "Start Clients" heading.
9) From here, create a backup QCN file. This backup may or may not enable you to recover from making a mistake later. Also, there is alot of information in this file if you care to navigate through it.
10) Launch QXDM Professional.
11) View-->New-->Common-->NV Browser
12) Options-->Communications-->Target Port (Select your phone)
13) The previous step should have "enabled" the NV Browser lower pane
14) Read and record the following NV Items
a) (441) Band Class Preference (0xFFFF)
b) (946) Expand Band Preference 16 to 32 Bits (0xBFFF)
c) (2954) Bits 32 to 63 of Band Pref (0xFFFFFFFF)
d) (1877) RF Band Configuration (0x0000000002680380)
15) Update item 1877 per discussion below
16) Reboot phone
17) It may be necessary to configure the Modem Setting in the hidden menu to reflect the additional bands.
NV Item configuration discussion:
I am no mobile phone programming expert (< 4 hours playing with them at this level to date); however, as near as I can tell, item 1877 configures the hardware of the modem while items 441, 946, and 2954 appear to be some type of masking bits regarding what bands to prefer. As such, I believe that the original value of item 1877 enables the following RF bands:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:25) WCDMA Band IV (1700)
If you set 1877 to 0x000000006E80380, it should enable the following:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:23) WCDMA Band II (1900)
(Bit:25) WCDMA Band IV (1700)
(Bit:26) WCDMA Band V (850)
If anyone succeeds in getting any further using this information, I would be very curious to hear of your success. Also, please do share with the community such that we can collectively move forward.
Disclaimer: I accept no responsibility for any damage that you may cause to your phone with these tools or procedures. Please note that these tools give you fairly low-level access to your system that enable you to significantly mess things up. Further, please note that modifying the radio bands on this device may void your warranty and/or be in violation of local regulations as set by your local authority (e.g., the FCC).

jwells777 said:
Unfortunately, as suggested by Core Memory above, I have not been completely successful in this investigation; however, I will post what I discovered along the way for the benefit of others. Perhaps someone else can pickup where I left off and get things working.
First, a summary of the final status:
1) Updated NV Items to enable 850 MHz and 1900 MHz bands
2) Was able to see 850 MHz UMTS providers under the "Search Available Networks"
3) It appeared that a connection was being made to the UMTS provider based upon both the signal strength monitor in "About phone" and the Engineering Mode page that provides data regarding 3g connections
4) In the Engineering Mode page, it seemed that the device was trying to connect (login?) to the network but was not being successful with the login
5) When at the lock screen and forcing the connection to the 850 MHz UMTS network, the "Emergency Only" text appears further suggesting that the connection is working but that my configuration for the network may be wrong.
6) No 1900 MHz providers ever appeared in the network lists while searching. I am not sure whether this is because this band was not functioning or if it was because no such provider existed since I am not terribly familiar with the coverage where I am currently at.
For those who wish to follow this path and test in their own local markets, please see the following steps required to reach this point:
Tools needed:
1) QPST 2.7 (Build 366 or later)
2) QXDM 3.12.714 (or later)
Steps:
1) Install necessary tools on your computer.
2) Enable USB debugging (Settings-->Applications-->Development)
3) Connect phone to PC
4) In the hidden menu (1809#*999#), ensure that Port Setting is configured to CP USB.
5) Launch QPST Configuration
6) Under Ports, select Add New Port.
7) Locate your device and enable the port. (NOTE: There may be two ports available to you here. I believe that you want to use the one that is for Serial / USB/QC connections.
8) From QPST Configuration, launch the "Software Download" tool under the "Start Clients" heading.
9) From here, create a backup QCN file. This backup may or may not enable you to recover from making a mistake later. Also, there is alot of information in this file if you care to navigate through it.
10) Launch QXDM Professional.
11) View-->New-->Common-->NV Browser
12) Options-->Communications-->Target Port (Select your phone)
13) The previous step should have "enabled" the NV Browser lower pane
14) Read and record the following NV Items
a) (441) Band Class Preference (0xFFFF)
b) (946) Expand Band Preference 16 to 32 Bits (0xBFFF)
c) (2954) Bits 32 to 63 of Band Pref (0xFFFFFFFF)
d) (1877) RF Band Configuration (0x0000000002680380)
15) Update item 1877 per discussion below
16) Reboot phone
17) It may be necessary to configure the Modem Setting in the hidden menu to reflect the additional bands.
NV Item configuration discussion:
I am no mobile phone programming expert (< 4 hours playing with them at this level to date); however, as near as I can tell, item 1877 configures the hardware of the modem while items 441, 946, and 2954 appear to be some type of masking bits regarding what bands to prefer. As such, I believe that the original value of item 1877 enables the following RF bands:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:25) WCDMA Band IV (1700)
If you set 1877 to 0x000000006E80380, it should enable the following:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:23) WCDMA Band II (1900)
(Bit:25) WCDMA Band IV (1700)
(Bit:26) WCDMA Band V (850)
If anyone succeeds in getting any further using this information, I would be very curious to hear of your success. Also, please do share with the community such that we can collectively move forward.
Disclaimer: I accept no responsibility for any damage that you may cause to your phone with these tools or procedures. Please note that these tools give you fairly low-level access to your system that enable you to significantly mess things up. Further, please note that modifying the radio bands on this device may void your warranty and/or be in violation of local regulations as set by your local authority (e.g., the FCC).
Click to expand...
Click to collapse
You've made a lot of progress, your information is very useful. I'll use it for further exploration.
Did you test it with a SIM card with a data plan which uses those bands?
Do you know how to use QPST and/or QXDM flash the phone with a binary file for the baseband?

I did try to connect using sim cards with data plans on the specified frequencies.
As for flashing a baseband, it seems that you should be able to do so with these tools; however, I didn't look into it.
Sent from my LG-P999 using XDA

jwells777 said:
I did try to connect using sim cards with data plans on the specified frequencies.
As for flashing a baseband, it seems that you should be able to do so with these tools; however, I didn't look into it.
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
The following was done while my phone is using the WIND SIM card which is my carrier and is restricted to AWS (WCDMA 1700) and Network Mode is set to WCDMA only.
I used your instructions to enable the UMTS 850 and 1900 MHz bands. One clarification is necessary. The HexaDecimal number 0x6e80380 = Decimal number 115868544 = Binary number 0b110111010000000001110000000.
The binary number is read from right to left with the first binary bit on the extreme right designated as bit 0 of the 27 bit sequence. The binary number is the key to the hexadecimal number used to program the RF Band Configuration in QXDM. For example, according to Jwells777, bit 23 is set to binary 1 to enable WCDMA Band II (band 2) and bit 26 is set to binary 1 to enable WCDMA band V (band 5). Refer to Jwells777 post in this thread which states the binary bits used to set the phone to use the phone's bands. Here's a binary-decimal-hexadecimal converter: http://www.mathsisfun.com/binary-decimal-hexadecimal-converter.html
The HexaDecimal number 0x000000006E80380 can be entered directly for setting "RF Band Configuration" at line 1877 in the NV browser. The HexaDecimal number is converted into the decimal number 115868544 which will appear when another read is performed. In Engineering Mode, the SW Enabled Band reading of my phone changed from 0x0000000102400000 to 0x0000000106C0000. When I changed the phone's setting to Automatic Band Selection, the SW EnableBand reading changed to 0x0000000106e80180. Changing the settings for Band Selection and/or Network Mode will change the SW EnableBand reading on page 5 of Engineering Mode.
In Band Selection, I enabled WCDMA 1900 which caused my connection to WIND's AWS 1700 to drop. I Looked at page 5 (RF Calibration) of Engineering Mode to see which bands were activated and found:
WCDMA1 : 22.37, 22.45, 0.00
WCDMA2 : 0.00, 0.00, 0.00
WCDMA4 : 23.47, 23.19, 0.00
WCDMA5 : 0.00, 0.00, 0.00
WCDMA8 : 0.00, 0.00, 0.00
GSM850 : 32.70, 32.63, 0.00
GSM900 : 32.76, 32.71, 0.00
DCS1800 : 29.40, 29.50, 0.00
PCS1900 : 30.10, 29.90, 0.00
LOSS:
-1.06, -1.18, -1.24
-1.54, -1.64, -1.74
-1.80, -1.79, -2.01
-2.11, -2.21
The same readings occur with Band Selection set to Automatic or manually to any other band except AWS which is the UMTS band the phone was set up to use at the factory.
This indicates that WCDMA2, 5, and 8 are not RF calibrated but DCS 1800 and PCS 1900 are RF calibrated.
I also found that
When I do a network search, it finds WIND and Public Mobile which operate on UMTS 1700 (AWS) and Bell and Telus which operate on UMTS 850 and 1900 but not Rogers which also operates on UMTS 850 and 1900. (Rogers does appear if I search for GSM networks too.)
"In Canada, UMTS coverage is being provided on the 850 MHz and 1900 MHz bands on the Rogers and Bell-Telus networks. Bell and Telus share the network. Recently, new providers Wind Mobile, Mobilicity and Videotron have begun operations in the 1700 MHz band."http://en.wikipedia.org/wiki/Universal_Mobile_Telecommunications_System
That indicates it is able to receive signals on UMTS 850 (Band 5) and 1900 (Band 2) which should enable the phone to see TELUS, Bell and Rogers.
http://en.wikipedia.org/wiki/UMTS_frequency_bands
When I select connection to Bell or TELUS, the phone tries to register but fails with the message: "Unable to connect to this network at this time. Please try again later." That message is generated by the phone's firmware/software, not the network.
I haven't yet tested the phone with a SIM Card for Rogers or Bell or TELUS. A friend has a Rogers SIM card with a data plan but I don't think it will be of any use to test the phone's supposed additionally enabled bands.
Conclusions:
Cognitive overload.
I am finding this quite confusing because of the variable terminology used such as UMTS, WCDMA, PCS, DCS, and the various bands and transmit and receive frequencies used for each protocol. If someone could make more sense out of the information I've provided, that would be very helpful.
Questions:
Engineering Mode Page 5 (RF Calibration) indicate that WCDMA Bands 2,5, and 8 are not RF calibrated but DCS 1800 and PCS 1900 are. Does this mean that the phone will not transmit on the WCDMA Bands 2,5 and 8 because the RF calibration for transmitting is not available?
If anyone can add something useful to this thread, that would be greatly appreciated.

nvm sorry mood pls delete this

Glad to hear that someone else was able to see the other bands using the information that I posted.
I would also add that I am able to see att in the US but not connect. I receive the same error mentioned by CoreMemory. If anyone has access to an O2X and could provide the qcn dump, it may help configure any other NV Items related to the new bands that we have missed.
Sent from my LG-P999 using XDA

HELP
Core Memory said:
You've made a lot of progress, your information is very useful. I'll use it for further exploration.
Did you test it with a SIM card with a data plan which uses those bands?
Do you know how to use QPST and/or QXDM flash the phone with a binary file for the baseband?
Click to expand...
Click to collapse
hi i'm trying but when insert the code 1809#*999# send me a error " MMI CODE CANDELED "

jwells777 said:
Glad to hear that someone else was able to see the other bands using the information that I posted.
I would also add that I am able to see att in the US but not connect. I receive the same error mentioned by CoreMemory. If anyone has access to an O2X and could provide the qcn dump, it may help configure any other NV Items related to the new bands that we have missed.
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
I wonder if the qcn dump from the O2X is useful since it has a different modem, it doesn't have the Qualcomm MDM6600 which is in the G2X/P999.
If we could get a qcn dump from another phone which uses the MDM6600 on the bands we want to get working, that would be a lot of help.
The Qualcomm Mobile Data Modem Software Interface 80-Vr001-2 manual would be very useful too.

Core Memory said:
If anyone can add something useful to this thread, that would be greatly appreciated.
Click to expand...
Click to collapse
i think if you post that into LG Optimus 2x forums with some instructions and explaining them. we could get the configuration from them. Soo you could go and ask them and explain them how to get those codes.
EDIT: NVM i just REAd your last post.

If you guys need a tester for anything, im all ears

Core Memory said:
I wonder if the qcn dump from the O2X is useful since it has a different modem, it doesn't have the Qualcomm MDM6600 which is in the G2X/P999.
If we could get a qcn dump from another phone which uses the MDM6600 on the bands we want to get working, that would be a lot of help.
The Qualcomm Mobile Data Modem Software Interface 80-Vr001-2 manual would be very useful too.
Click to expand...
Click to collapse
I didn't think of the fact that the modems are different. I agree with you that it would probably be more useful to have the dump from a phone with the 6600 that is configured for the new bands
Sent from my LG-P999 using XDA

jwells777 said:
I didn't think of the fact that the modems are different. I agree with you that it would probably be more useful to have the dump from a phone with the 6600 that is configured for the new bands
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
I don't know of anyone with one. As well, the file contains info which the person who supplies it would have to trust us not to use.

we can ask those guys for the configuration codes it seems they use the same modem or item.
http://forum.xda-developers.com/showthread.php?t=992635#12257150

3G USB modem, all commands.....

ZTE AT-commands
disable/enable flash cd-drive
AT+ZCDRUN=8 disable
AT+ZCDRUN=9 enable
stay online
AT+ZOPRT=5
check net-/SIMlock
AT+ZSEC?
answer: <SEC_STATUE>,<SEC_ITEMS>
< SEC_STATUE >:
0 Initializing the encryption (Insignificant SEC_ITEMS)
1 Network Lock error. (Insignificant SEC_ITEMS)
2 Network Locked
3 Unlocked or correct MCC/MNC
<SEC_ITEMS>:
0 No action
1 Network lock
2 (U)SIM card lock
3 Network Lock and (U)SIM card Lock
Unlock
+ZNCK="unlock-code"
+ZNCK?
Unlock residual time 0-5
Report signal strength +ZRSSI
Syntax
+ZRSSI parameter command syntax
Command Possible response(s)
+ZRSSI <CR><LF>+ZRSSI:<rssi>,<ecio>,<rscp><CR><LF><CR><LF>
OK<CR><LF>
<CR><LF>+CME ERROR: <err><CR><LF>
Description
This command is used to report signal strength.. Notice the command is used only in platform
6290 and 6246.
Defined values
3G network(registered to 3G network)
+ZRSSI: rssi,ecio,rscp
The unit of Rscp is 0.5dbm ( in 0.5 dBm step with no sign).
The unit of Ecio is 0.5db ( in 0.5 dB step with no sign).
The relation is: 2*rssi=rscp-ecio
e.g.
+ZRSSI: 49,8,106
Rssidbm = -rssi = -49dbm
Eciodb = -ecio/2= -4db
Rscpdbm = - rscp /2= -53dbm
2G network(there is no ecio and rscp value when registered in 2G network ,so set
value of 1000)
e.g.
+ZRSSI: rssi,1000,1000
No network e.g.
+ZRSSI :OK
Notice! the command is used only in platform 6290 and 6246.
Set Operational Mode
AT+ZSNT=0,0,0 (Auto) - Default
AT+ZSNT=1,0,0 GPRS Only
AT+ZSNT=2,0,0 3G Only
AT+ZSNT=0,0,1 GPRS Preferred
AT+ZSNT=0,0,2 3G Preferred
Query Operational Mode
AT+ZPAS?
<CR><LF>+ZPAS:<network>,<srv_domain><CR><LF>OK<CR><LF>
<network>: the type of current network
No Service
Limited Service
GPRS
GSM
UMTS
EDGE
HSDPA
<srv_domain>: service domain
CS_ONLY: CS domain service available.
PS_ONLY: PS domain service available.
CS_PS: CS&PS domain service available.
CAMPED: camped in a cell.
example
Command: AT+ZPAS?
Response: +ZPAS: "GPRS","CS_PS"
OK
Set Band Status +ZBANDI
at+zbandi=0 • Automatic (Auto) - Default
at+zbandi=1 • UMTS 850 + GSM 900/1800
at+zbandi=2 • UMTS 2100 + GSM 900/1800 (Europe)
at+zbandi=3 • UMTS 850/2100 + GSM 900/1800
at+zbandi=4 • UMTS 850/1900 + GSM 850/1900
Notice! the command is used only in platform 6290 and 6246.
HUAWEI MODEM
AT
OK
ATX
OK
ATI
OK
AT^U2DIAG=0
OK

Unlock
+ZNCK="unlock-code"
+ZNCK?
Unlock residual time 0-5
Click to expand...
Click to collapse
This is for PIN code? I do not remember and I have two attempts.

[Q] z5s 3g modem

I have a ZTE nubia Z5S.
It is great. but 3g is only in 2600 mhz. So only edge for me for now.
Looking around I found some people are trying to unlock the modem and they says the modem supports other bands.
Any idea how to unlock the modem, a new firmware ?
Commands to check the modem?
wait so the z5s gets released in at&t and get a rom? ( I know is a long shot)
Some people is asking roms with the bands released ( someone in miui was working the modem)
Any guide to learn is welcome.

According to http://www.nubia.cn/productdetail.php?id=335, Nubia Z5S supports 3G with the UMTS/WCDMA protocol on the 2100MHz spectrum.
When you say 2600MHz, do you mean LTE or 3G?
Anyway, the WTR1605 tranceiver used on Nubia Z5S has no LTE support, otherwise is capable to handle many UMTS bands, but ZTE might have locked down some. This is the good news.

you are right,
In my country we need:
CLARO
GSM: 850MHz
UMTS/HSDPA: 850Mhz
MOVISTAR (Virgin Mobile)
GSM: 850MHz
UMTS/HSDPA: 850Mhz
TIGO (Uff, UNE y ETB)
GSM: 1900MHz
UMTS/HSDPA: 1900MHz
now ready to learn about unlock bands

anyone has experience with the baseband switcher?
It is possible to use it to change baseband if the z5s is rooted?
Or I need to install cyanagenmod and then use the baseband switcher?

I tried:
to open a terminal:
adb shell
then:
am start -n com.android.settings/.BandMode
I tries to open a window in the cell but the window is empty

I did the command from terminal after su, so the command ran as superuser.
But the same result a window with tittle but no menus.
It looks like that command is for mtk cpus.
Anyone know how to change the bands to automatic snpadragons cpus?

FInally I am getting some place,
I got to the wlan settings, I typed the code *#*#4636#*# inside notepad and copy the code.
Paste in the phone.
I got the menu:
Testing
Phone Information
Battery Information
Usage Statics
Wlan information
I go, WLAN information -> WLAN API
I got the menu:
WLAN settings
disableNetwork
disconnect
enableNetwork
getconfiguredNetworks
getConnectionInfo
Half the menus are not working, but If got to enableNetwork asks:
Input
Enter Network Id:
SO Anyone knows What codes I need to use there?

well, I got the list of the bands supported by the modem using att commands:
AT$QCBANDPREF=?
$QCBANDPREF: (0-1),
"1.BC0_A"
"2.BC0_B"
"3.BC0"
"4.BC1"
"5.BC3"
"6.BC4"
"7.BC5"
"8.GSM_DCS_1800"
"9.GSM_EGSM_900"
"10.GSM_PGSM_900"
"11.BC6"
"12.BC7"
"13.BC8"
"14.BC9"
"15.BC10"
"16.BC11"
"17.BC12"
"18.BC14"
"19.BC15"
"20.BC16
"21.GSM_450"
"22.GSM_480"
"23.GSM_750"
"24.GSM_850"
"25.GSM_RGSM_900"
"26.GSM_PCS_1900"
"27.WCDMA_I_IMT_2000"
"28.WCDMA_II_PCS_1900"
"29.WCDMA_III_1700 "
"30.WCDMA_IV_1700"
"31.WCDMA_V_850"
"32.WCDMA_VI_800 "
"33.WCDMA_VII_2600"
"34.WCDMA_VIII_900"
"35.WCDMA_IX_1700"
"36.WLAN_US_2400 "
"37.WLAN_JAPAN_2400"
"38.WLAN_EUROPE_2400"
"39.WLAN_SPAIN_2400"
"40.WLAN_FRANCE_2400 "
"41.WLAN_US_5000"
"42.WLAN_JAPAN_5000"
"43.WLAN_EUROPE_5000"
"44.WLAN_SPAIN_5000"
"45.WLAN_FRANCE_5000 "
"46.Any"
Any help what this mean?

CM12 - How to choose AWS 1700 MHz?

I bought my 1+ from the website and it was working on Wind's network (1700/2100 MHz) until just now. I flashed CM12 nightly and realized I couldn't make phone calls (data and WiFi were fine). So I followed a thread on XDA and changed my band to USA/Europe (*#*#4636#*#*), but none of these have 1700 or 2100 selected. Now, my phone won't detect Wind's network in Settings > Network Operators and data/SMS/voice won't work.
I tried many different modems (CM12, 44S, etc.) but it only shows Bell, Telus, Rogers on the network scan. Any ideas on how to get Wind back?

Update, here's my analysis (this is for CM12 nightly):
In the stock 44S ROM there was an option to choose "Auto" for GSM/UMTS band under the phone testing menu (open Phone, dial *#*#4636#*#*, click Phone Info). Auto lets the phone pick up frequencies that are not specified in the other 2 choices: USA and Europe, such as 1700 MHz and 2100 MHz.
If Europe or USA is chosen for the GSM/UMTS band, there is no way to go back to Auto and the phone is locked out of connecting to networks running on the 1700 and 2100 MHz frequencies, such as Wind Mobile in Canada and other AWS providers. This is urgent and the only way to fix it was to flash back to stock, choose Auto, and reflash later versions. Changing ROMs or modems did not work.
Does anyone else have a similar issue (you can check whether or not you have the Auto option in the testing menu) or is there a way to fix this that I'm oblivious to? I've raised a JIRA to Cyanogenmod.

How to:- Enable LTE+ on SD617 based Moto G4 Plus

As we know here https://www.qualcomm.com/products/snapdragon/processors/617 , Moto G4 SOC supports 2CA of different LTE band combinations. We were able to enable band 41, band 20 and band 28 using QXDM until the December update. The DEC update seems to lock the modem to the OEM based LTE bands so the new bands cannot be added on the latest firmware.
Motorola has not provided systemUI support on stock firmware for LTE+.
Requirements:-
1. A PC with Motorola drivers
2. Stock firmware rooted/unrooted Moto G4/plus
3. QXDM software (Search on google it is available everywhere)
4. QPST software (maybe needed to map COM ports)
5. Any custom ROM 8.1 after the above process
Note 1:- Please take a backup of NV (QCN) that contains the IMEI via QPST software. It hardly takes few minutes. So there is no risk of 'baseband unknown' or loss of signals.
Process:-
1. With no SIM cards in any slots and airplane mode ON, boot the phone into BP Tools from bootloader menu.
2. Connect the phone to PC and map the correct Motorola Diag port no xx
3. Open QXDM and go to communication and click to the COM port
4. Select NV browser and enter spc 000000 in the command line
5. Go to RF LTE from the category filter on the right side.
6. Scroll down till item number 70975
7. Read item number 70977 RFNV LTE B3 CA BC CONFIG and write 20 in the field below. ( 20 = 2CA band3 + band5)
8. Move on to 70979 RFNV LTE B5 CA BC CONFIG and write 549755813904 in the field below. ( 549755813904 = 2CA band5 + band 40)
9. Continue to 71014 RFNV LTE B40 CA BC CONFIG and write 549755813892 in the field below. ( 549755813892 = 2CA band40 + band 3)
10. Install QPST and select efs explorer, enter SPC 000000. Go to item_files>modem>lte>common. Delete the file ca_disable and copy new ca_disable after unzipping ca_disable.zip from here. (the original file has CA disable=YES which is deleted in my attached file)
11. Power off the phone, disconnect the cable, insert sim card (JIO) and turn off airplane mode.
12. There is no sign of LTE+ in stock firmware except slight improvement in data speeds.
13. Install custom ROM 8.1 ( I installed AICP athene 8.1 20180310)
I am receiving LTE+ signals whenever the phone latches to band3 and band 5. There is no LTE+ in band 40 in my location currently.
Since the modem firmware and FSG isnt ideally configured for 2CA, we are not able to see secondary carrier signal or sec antenna in Network Signal Guru but I am getting speeds above 85 MBps while latching to the above bands.
Note 2:- I take no responsibility for whatever happens to your device, PC or anything. This guide is for enthusiasts who are willing to take little risk. Do not write 3CA values anything other than the values written above because the SD617 SOC supports 2CA only and not 3CA, not 3+5+40.
Similar threads:-
https://forum.xda-developers.com/lenovo-p2/how-to/enabled-4g-ca-p2-t3707584
https://zukfans.eu/community/threads/enable-carrier-aggregation-lte-a-on-zuk-z2-qualcomm-phone.7388/

In my experience, when I "unlocked" the LTE band 20 on my US XT1644, it was still not in use in that area, dropping back to 3G. I assume that's because the actual RF amplifier head-end is not present, even if the chipset was tricked to "support" it.

SoNic67 said:
In my experience, when I "unlocked" the LTE band 20 on my US XT1644, it was still not in use in that area, dropping back to 3G. I assume that's because the actual RF amplifier head-end is not present, even if the chipset was tricked to "support" it.
Click to expand...
Click to collapse
You can verify band 20 RF capabilities in RFNV LTE B20 CHAN in RF LTE section using qxdm.

For LTE 20 I have re-calculated and changed only the value of:
06828 LTE BC Config LTE_BC_CONFIG_type.lte.config
But after that. it just didn't actually pick up the LTE band 20 (in an area where a native EU GSM phone was), so some hardware piece is missing for the 800MHz frequency in the US version. I assume that's the same for modifying a non-US with US bands too.
Now, about the CA... I am on a Verizon Wireless MVNO, so I blamed that for not having CA (I still get 60-68Mbps DL speeds). The LTE bands for VZW would be 2, 4, 13
In EU I have native SIM (Vodafone) and I get 40-60Mbps too...

Checked right now - the US version (XT1644) doesn't have items with ID higher than 65673. So none of those "LTE CA" appear.
Changing the LTE item that adds bands seems to be still working - the changed value remains after reboot.

QPST identify device as no phone.also command line is greyed out and nothing can be entered.? Any help.!

kidjohny said:
QPST identify device as no phone.also command line is greyed out and nothing can be entered.? Any help.!
Click to expand...
Click to collapse
Identify the com port from the PC Device manager. With QPST configuration opened, select any one com port from the device manager. One like Motorola BP USB com port, Mot qc diag port and Motorola AP com port. The device identity like ESN number should be visible in QPST configuration.

SoNic67 said:
For LTE 20 I have re-calculated and changed only the value of:
06828 LTE BC Config LTE_BC_CONFIG_type.lte.config
But after that. it just didn't actually pick up the LTE band 20 (in an area where a native EU GSM phone was), so some hardware piece is missing for the 800MHz frequency in the US version. I assume that's the same for modifying a non-US with US bands too.
Now, about the CA... I am on a Verizon Wireless MVNO, so I blamed that for not having CA (I still get 60-68Mbps DL speeds). The LTE bands for VZW would be 2, 4, 13
In EU I have native SIM (Vodafone) and I get 40-60Mbps too...
Click to expand...
Click to collapse
Band x CA list is in RF LTE menu not near items 65xxxx or 6828/6829

dr.faramroze said:
Identify the com port from the PC Device manager. With QPST configuration opened, select any one com port from the device manager. One like Motorola BP USB com port, Mot qc diag port and Motorola AP com port. The device identity like ESN number should be visible in QPST configuration.
Click to expand...
Click to collapse
It's OK now..but no RF LTE option..in category field.

dr.faramroze said:
Band x CA list is in RF LTE menu not near items 65xxxx or 6828/6829
Click to expand...
Click to collapse
There is no "RF LTE" category.
Also, that category would not matter at all as long as you have the actual ID number of the NV location (70975 in your example). As I said, the XT1644 that I have doesn't go higher than location number 65673.

Can u specify the diag driver u used.Where can I get that.?
In your screenshot qxdm identify it as msm8926.But in mine it shows 4110.could that be a problem.?

You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
https://drive.google.com/file/d/0Bw01zu5q0Cg-aFFEbFU4ZE85cEU/edit
https://www.4shared.com/zip/YGncBw36ce/QXDMWIN314_Installer-011443.html
https://www.4shared.com/rar/zS1_Gczdei/QXDMWIN31411741U.html#
https://www.4shared.com/rar/irXxwa_Gca/QXDMWIN40001241U.html
https://www.4shared.com/rar/xYg-VTi3ei/QDARTWIN48000393F.html
https://www.4shared.com/rar/QpBdFX9Kei/QPST_27460.html
Install version 594 for unlimited access https://drive.google.com/file/d/0B4ciwAYRi6hXUy1mU19UVlJ5OEU/view

when i try to boot into bp tools, it just boots into android instead

BP Tools mode is diag Com port mode in android OS booting system. It is normal android with serial port.

dr.faramroze said:
You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
https://www.4shared.com/rar/zS1_Gczdei/QXDMWIN31411741U.html#
https://www.4shared.com/rar/irXxwa_Gca/QXDMWIN40001241U.html
https://www.4shared.com/rar/xYg-VTi3ei/QDARTWIN48000393F.html
https://www.4shared.com/rar/QpBdFX9Kei/QPST_27460.html
Click to expand...
Click to collapse
Great. Thanks....its all working fine now.able to get LTE+.But no big difference in speed here in my area..!...also u missed the starting location to find ca_disable file.item_files is under nm(or nvm or nv..something like that.) folder.Have a Gud Day.Appreciate ur work.

dr.faramroze said:
You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
Click to expand...
Click to collapse
The newer download in the first post was corrupted, I will try yours when I get at my PC in a couple of days (I am traveling now).

SoNic67 said:
The newer download in the first post was corrupted, I will try yours when I get at my PC in a couple of days (I am traveling now).
Click to expand...
Click to collapse
There are many versions of QXDM now in my thread above. Make sure you use atleast 594.

For those who want to tinker with additional LTE bands. Here are the stock values of Moto G4/plus.
MOTO G4 PLUS
441= 0xFFFF
946= 0x3FFF
1877= 562950027346304
2954= 4294967295
4548= 562950024724480
6828= 549755814037
6829= item inactive
65633= 0x0000008000000091
Always make a .qcn backup in QPST>software download>backup. Fastboot flash modem nonhlos will also restore original values and loss of signal. Let me know if anyone is able to achieve additional bands like band 41, band 20, band 28 etc. It will be seen by Network Signal Guru.

dr.faramroze said:
For those who want to tinker with additional LTE bands. Here are the stock values of Moto G4/plus.
MOTO G4 PLUS
441= 0xFFFF
946= 0x3FFF
1877= 562950027346304
2954= 4294967295
4548= 562950024724480
6828= 549755814037
6829= item inactive
65633= 0x0000008000000091
Always make a .qcn backup in QPST>software download>backup. Fastboot flash modem nonhlos will also restore original values and loss of signal. Let me know if anyone is able to achieve additional bands like band 41, band 20, band 28 etc. It will be seen by Network Signal Guru.
Click to expand...
Click to collapse
Careful, the LTE bands and numbers are different for different markets! US bands are different from EU and Indian models.

I have tried the new software. On the US version, at those fields, I get "NV Status Error Received: No such file or directory"