Qualcomm mdm6600 (GOBI) AT Commands - T-Mobile LG G2x

UPDATE April 21, 2012
I've found the P999 Qualcomm MDM6600 Calibration Configuration data at:
http://csmg.lgmobile.com:9002/swdat..._11/[TachyonV34]LGP999_110401_Calibration.zip
It contains the WCDMA and GSM Calibration data for the P999. It shows that the only P999 MDM6600 calibration data used is for the following bands:
-<TACHYON>
-<HEADER> <TYPE>Calibration Configuration</TYPE>
<USAGE>Tachyon</USAGE>
<VERSION>1.0.0</VERSION>
<DATE>2010.11.16 10:46</DATE>
<AUTHOR>Seol Joong Hwan</AUTHOR>
</HEADER>
-<BODY>
-<MODEL_INFORMATION>
<MODEL_NAME>LGP999</MODEL_NAME> <BUYER_NAME>AWC</BUYER_NAME> <BIN_VERSION/>
<HWVER/>
<BAUDRATE>115200</BAUDRATE>
-<BAND_INFORMATION>
-<SYSTEM NAME="WCDMA">
<BAND>WCDMA_BAND1</BAND>
<BAND>WCDMA_BAND4</BAND>
</SYSTEM>
-<SYSTEM NAME="GSM">
<BAND>GSM900</BAND>
<BAND>GSM850</BAND>
<BAND>DCS1800</BAND>
<BAND>PCS1900</BAND>
</SYSTEM>
</BAND_INFORMATION>
-<TACHYON>
-<HEADER>
<TYPE>CallSetup Configuration</TYPE>
<USAGE>Tachyon</USAGE>
<VERSION>2.0.0</VERSION>
<!-- HANDOVER OPTION ADDED IN GSM NST SETUP -->
<DATE>2007.09.22 08:30</DATE>
<AUTHOR>Seol Joong Hwan</AUTHOR>
</HEADER> -<BODY>
-<MODEL_INFORMATION>
<MODEL_NAME>LGP999</MODEL_NAME> <BUYER_NAME>AWC</BUYER_NAME>
-<BAND_INFORMATION>
<!-- ROWCOUNT => 해당 Phone이 지원하는 SYS_TYPE의 수.-->
-<SYS_TYPE NAME="HSDPA">
<!-- NAME => 지원하는 System type 명 ex) AMPS, CDMA, WCDMA, GSM, GPRS, EVDO, HSPA -->
<!-- ROWCOUNT => 선택 System에서 Phone이 지원하는 BAND의 수 -->
<BAND>WCDMA_BAND1</BAND>
</SYS_TYPE>
-<SYS_TYPE NAME="WCDMA">
<!-- NAME => 지원하는 System type 명 ex) AMPS, CDMA, WCDMA, GSM, GPRS, EVDO, HSPA -->
<!-- ROWCOUNT => 선택 System에서 Phone이 지원하는 BAND의 수 -->
<BAND>WCDMA_BAND1</BAND>
<BAND>WCDMA_BAND5</BAND>
</SYS_TYPE> -<SYS_TYPE NAME="GSM">
<!-- NAME => 지원하는 System type 명 ex) AMPS, CDMA, WCDMA, GSM, GPRS, EVDO, HSPA -->
<!-- ROWCOUNT => 선택 System에서 Phone이 지원하는 BAND의 수 -->
<BAND>DCS1800</BAND>
<BAND>GSM900</BAND>
<BAND>PCS1900</BAND>
<BAND>GSM850</BAND>
</SYS_TYPE>
</BAND_INFORMATION>
</MODEL_INFORMATION>
Sequence Configuration Tachyon 1.0.0 2007.09.22 08:30 Seol Joong Hwan QUALCOMM LGP999 AWC xx 115200 WCDMA_BAND1 DCS1800 GSM900 PCS1900 GSM850 3G_QCT_COM 4.2 3.0 PHONE_POWER_OFF,SLEEP1000,D1FF,SLEEP2000,PHONE_POWER_ON PHONE_POWER_OFF,SLEEP1000,D2FF LGE Android 3 YES YES YES YES YES YES YES YES YES 70000 CHANGE_DMSS NVC CHANGE_FTM CAL_CHECK_INIT WCDMA,WCDMA_BAND1,THERM WCDMA,WCDMA_BAND1,XO WCDMA,WCDMA_BAND1,TX HDET WCDMA,WCDMA_BAND1,TX COMP WCDMA,WCDMA_BAND1,TX LIMIT WCDMA,WCDMA_BAND1,RX WCDMA,WCDMA_BAND4,TX HDET WCDMA,WCDMA_BAND4,TX COMP WCDMA,WCDMA_BAND4,TX LIMIT WCDMA,WCDMA_BAND4,RX GSM,GSM900,TX LINEAR GSM,GSM850,TX LINEAR GSM,DCS1800,TX LINEAR GSM,PCS1900,TX LINEAR GSM,GSM900,RX GSM,GSM850,RX GSM,DCS1800,RX GSM,PCS1900,RX SET_RFNV_LOAD SET_CAL_CHECK CHANGE_FTM YES YES YES YES YES NO YES YES YES NO YES NO NO NO YES YES YES YES YES NO YES YES YES NO YES NO NO NO YES YES YES YES YES NO YES YES YES NO YES NO NO NO YES YES YES YES YES YES YES YES NO YES NO NO NO YES YES NO YES YES YES YES YES YES NO YES NO NO YES YES NOS NO NO NO NO YES YES YES YES YES YES YES YES NO YES NO NO YES NO NO NO NO NO
MDM6600 calibration data is needed to enable the other bands to work. If someone supplies the calibration data from another phone which has the MDM6600 enabled for the other bands I may be able to integrate it into the P999 MDM6600 calibration data and enable all of the bands.
UDATE January 6 2012
Here is a link to more information about the Qualcomm MDM6200 and MDM6600
80-VR001-3 MDM6200 AND MDM6600 MOBILE DATA MODEM USER GUIDE
http://www.docin.com/p-162606115.html
PREVIOUS:
I've learned a bit about using QXDM Professional and looked at NV memory content with the NV Browser function of QXDM and found that the G2X radio modem is capable of using WCDMA 800, 900, 1800, 1900, 2100 and it appears that the Rx and Tx tuning and power setting parameters for each were done at the factory (I am not certain if every one of those required for practical operation were done for the non-activated channels). I also found references to memory areas reserved for SIRIUS. I have to find where the band setting is located and I think there's a special password to be able to access the restricted features which I will need to get too (It's not the SPC number which is 000000).
I've found the Qualcomm modem AT command reference document which applies to the mdm6600 chip in the LG-P999/G2X and, when I querried the modem to determine what bands it supports, I got the list of available bands/frequencies and the geographical location for each. Apparently, the frequencies can be set through the AT commands but I am not brave enough to try it. It may also be a way to flash the baseband. Maybe someone else has or will who is braver than me and will post their findings.
Here's the reference document:
http://mod-book.ru/files/Gobi2k/Documents/AT_Command_Set_Gobi.pdf
The Band preferences AT command is located on page 36.
I set the phone port as: CP USB and accessed with Windows HyperTerminal with the port set at the one for the LGE Mobile USB Modem driver.
I queried the modem with: AT$QCBANDPREF=?
The modem responded with:
$QCBANDPREF: (0-1),
"1.BC0_A"
"2.BC0_B"
"3.BC0"
"4.BC1"
"5.BC3"
"6.BC4"
"7.BC5"
"8.GSM_DCS_1800"
"9.GSM_EGSM_900"
"10.GSM_PGSM_900"
"11.BC6"
"12.BC7"
"13.BC8"
"14.BC9"
"15.BC10"
"16.BC11"
"17.BC12"
"18.BC14"
"19.BC15"
"20.BC16
"21.GSM_450"
"22.GSM_480"
"23.GSM_750"
"24.GSM_850"
"25.GSM_RGSM_900"
"26.GSM_PCS_1900"
"27.WCDMA_I_IMT_2000"
"28.WCDMA_II_PCS_1900"
"29.WCDMA_III_1700 "
"30.WCDMA_IV_1700"
"31.WCDMA_V_850"
"32.WCDMA_VI_800 "
"33.WCDMA_VII_2600"
"34.WCDMA_VIII_900"
"35.WCDMA_IX_1700"
"36.WLAN_US_2400 "
"37.WLAN_JAPAN_2400"
"38.WLAN_EUROPE_2400"
"39.WLAN_SPAIN_2400"
"40.WLAN_FRANCE_2400 "
"41.WLAN_US_5000"
"42.WLAN_JAPAN_5000"
"43.WLAN_EUROPE_5000"
"44.WLAN_SPAIN_5000"
"45.WLAN_FRANCE_5000 "
"46.Any"
Here's what's on page 36 of the AT command reference document:
Command Description Operation Supported
AT$QCBANDPR
EF=
<persistence>,
<band_indices>
Sets the band
preferences of
the device
Result: Band preferences set
and also saved in NV memory,
based on persistence parameter
Note: For usage information,
enter AT$QCBANDPREF=?
Persistence=1 indicates that the
band setting will be saved
across power cycles.
Cmd will return OK as long as
there is at least one supported
band in the list of bands.
For example, $QCBANDPREF =
1, “27,28” will set the band
preferences to WCDMA 2100
and WCDMA 1900 only.
Also, here's where there are some more AT commands which work:
http://www.pharscape.org/GlobeTrotterGPRShowto#_Toc83808119
And, when the phone is in Engineering Mode, the data from the Engineering Mode pages appears in the HyperTerminal window and changes in real time for the Engineering Mode page displayed on the phone. Here's an example:
+XCGEDPAGE: ITEM_3G : 0 #[ RRC State & Serving Cell Information ] ##RRC State
: DISCONNECTED #S_FREQ : 1588 #S_PSC : 255 #S_RSCP : -90 #S_ECIO: -10 #S_R
SSI : - 80 #Tx Power : 0 #DRX Cycle : 64 #Srxlevel : 25 #Squal : 16 #SIR :
Not_Yet #SIR Target : Not_Yet #BLER : Not_Yet #BLER Target : Not_Yet#####ITEM
_3G : 1 #[ Intra Cell FDD Information ] ## UARFCN PSC RSCP EcIo isAS #N0 :
1588 255 -90 -10 0#N1 : 1588 382 -110 -31 0#N2 : 1588 318 -102 -22 0#N3 : 1588
247 -90 -10 0######ITEM_3G : 2 #[ Inter Cell FDD Information ] ## UARFCN PSC
RSCP EcIo RSSI isAS ######ITEM_3G : 3 #[ Inter RAT Information ] ##ARFCN
BSIC RSSI####ITEM_3G : 4 #[ Current State Information ] ##RAB ID : N/A #RAB I
nfo (UL/DL Bitrate) : 0 / 0 #Cell Selection state : CAMPED_ST_CELL #SRB ID : Not
_Yet #L1 State : L1M_PCH_SLEEP
+XCGEDPAGE: ITEM_RFCAL : 0#[ RFCAL Information ]##PID : OR11S(IMEI removed) #Ezlo
oks : Online #CalDate : 2011.9.20 22:6:17 #IP : 200.71.1.192 #Section: 1#WCD
MA1 : 22.37, 22.45, 0.00 #WCDMA2 : 0.00, 0.00, 0.00 #WCDMA4 : 23.47, 2
3.19, 0.00 #WCDMA5 : 0.00, 0.00, 0.00 #WCDMA8 : 0.00, 0.00, 0.00 #GSM8
50 : 32.70, 32.63, 0.00 #GSM900 : 32.76, 32.71, 0.00 #DCS1800 : 29.40,
29.50, 0.00 #PCS1900 : 30.10, 29.90, 0.00 #LOSS : #-1.06, -1.18, -1.2
4 #-1.54, -1.64, -1.74 #-1.80, -1.79, -2.01 #-2.11, -2.21

This is a very interesting post. So are you saying that T-Mobile didn't really lie about the quad-bands?

FatalityBoyZahy said:
This is a very interesting post. So are you saying that T-Mobile didn't really lie about the quad-bands?
Click to expand...
Click to collapse
The Qualcomm mdm6600 (GOBI 3000) has all of the cell radio bands listed but, apparently, cannot be activated from the hidden menu although they are listed. The AT commands directly control the modem which, apparently, can be used to set the radio bands to any of those the modem is capable of using and to retain the values across reboots of the phone. I am too cowardly to try it, maybe you or someone else will and report back.

Core Memory said:
The Qualcomm mdm6600 (GOBI 3000) has all of the cell radio bands listed but, apparently, cannot be activated from the hidden menu although they are listed. The AT commands directly control the modem which, apparently, can be used to set the radio bands to any of those the modem is capable of using and to retain the values across reboots of the phone. I am too cowardly to try it, maybe you or someone else will and report back.
Click to expand...
Click to collapse
Well, I do have Premium Handset Protection, and T-Mobile is pretty stupid. I'll look into giving it a try, and if anything goes wrong, I'll just tell them my phone has been acting up. ^_^

FatalityBoyZahy said:
Well, I do have Premium Handset Protection, and T-Mobile is pretty stupid. I'll look into giving it a try, and if anything goes wrong, I'll just tell them my phone has been acting up. ^_^
Click to expand...
Click to collapse
The phone will respond with OK if it worked. If it did, you should be able to reset it the same way.
When I used HyperTerminal (any terminal program will work), I used the settings that I got from the control panel information for the LG USB modem driver. Device manager -> LGE Mobile USB Modem -> Advanced -> Advanced Port Settings -> COM Port Number
Setup the terminal with the COM Port number, default bps, 8 data bits, No Parity, 1 Stop bit, No flow control.

You need to check that the radio chips (power amps) that support the other frequencies are in the phone. Else, they won't work.
Have not seen a teardown that shows the radio chips but recall they were not there on original phones.
If you find out 850 MHz CDMA works then ATT folks might take a look at the G2x
Sent from my G2x running Bionix Reloaded

sambodie said:
You need to check that the radio chips (power amps) that support the other frequencies are in the phone. Else, they won't work.
Have not seen a teardown that shows the radio chips but recall they were not there on original phones.
If you find out 850 MHz CDMA works then ATT folks might take a look at the G2x
Sent from my G2x running Bionix Reloaded
Click to expand...
Click to collapse
The radio is the modem, it has the capability built in. Although the frequency/band can be set, the external "glue", such as filters and the correct antenna length, is what is necessary to enable a specific radio frequency to actually work. It's worth trying to find out.

Guys I live in Germany and have this phone. It runs our bands are 900 and 1800 and yours are 850 and 1900. We also get to use american iphones on 3g network once unlocked.
sent from my Google device

jetbruceli said:
Guys I live in Germany and have this phone. It runs our bands are 900 and 1800 and yours are 850 and 1900. We also get to use american iphones on 3g network once unlocked.
sent from my Google device
Click to expand...
Click to collapse
Is your phone the lg p999 or the p990 version? They use different radio modems. The one here is the p999 which uses a qualcomm modem and AWS 1700 MHz band.

Core Memory said:
Is your phone the lg p999 or the p990 version? They use different radio modems. The one here is the p999 which uses a qualcomm modem and AWS 1700 MHz band.
Click to expand...
Click to collapse
P999 is mine
sent from my Google device

jetbruceli said:
P999 is mine
sent from my Google device
Click to expand...
Click to collapse
I see, your phone is a G2X from the USA which runs on 3G when unlocked from T-Mobile. The network you are on must use AWS 1700/2100 for 3G. Which cell phone carrier are you using?

I use o2.de and I used a T-mobile, vodofone.
Nvidia always!

jetbruceli said:
Guys I live in Germany and have this phone. It runs our bands are 900 and 1800 and yours are 850 and 1900. We also get to use american iphones on 3g network once unlocked.
sent from my Google device
Click to expand...
Click to collapse
3g freq are different from 2g. This phone is quadband in 2g so it explains why it works. 3g on germany runs at 2100mhz which is why it works, it does not mean that it supports other 3g frequencies that are mostly used in north america
worldtimezone.net/gsm.html
Sent from my LG-P999 using xda premium

True but if I can use an Att iPhone on 3g then it would mean that my network is the same as att. So this g2x will operate in the att network. Now cdma is another story. We don't have cdma here.
Nvidia always!

Here's info about the UMTS 3G frequency bands:
http://en.wikipedia.org/wiki/UMTS_frequency_bands
And from:
http://en.wikipedia.org/wiki/UMTS
"W-CDMA (UTRA-FDD)
Main article: W-CDMA (UMTS)
UMTS transmitter on the roof of a building
W-CDMA uses the DS-CDMA channel access method with a pair of 5 MHz wide channels. In contrast, the competing CDMA2000 system uses one or more available 1.25 MHz channels for each direction of communication. W-CDMA systems are widely criticized for their large spectrum usage, which has delayed deployment in countries that acted relatively slowly in allocating new frequencies specifically for 3G services (such as the United States).
The specific frequency bands originally defined by the UMTS standard are 1885–2025 MHz for the mobile-to-base (uplink) and 2110–2200 MHz for the base-to-mobile (downlink). In the US, 1710–1755 MHz and 2110–2155 MHz will be used instead, as the 1900 MHz band was already used.[5] While UMTS2100 is the most widely deployed UMTS band, some countries' UMTS operators use the 850 MHz and/or 1900 MHz bands (independently, meaning uplink and downlink are within the same band), notably in the US by AT&T Mobility, New Zealand by Telecom New Zealand on the XT Mobile Network and in Australia by Telstra on the Next G network.
W-CDMA is a part of IMT-2000 as IMT Direct Spread."
I've also added some more information to my Original Post regarding more AT commands I've found and that the phone is broadcasting it's Engineering Mode pages in real time to the terminal.

Changed Radio Bands Successfully!
I decided to take a chance with bricking my phone's radio modem by using a serial terminal and an AT command for the Qualcomm modem to change the modem's radio band. I succeeded!
I used the example AT command in my other post http://forum.xda-developers.com/showthread.php?t=1412064 about the Qualcomm modem AT commands and temporarily changed the radio bands to WCDMA_I_IMT_2000 and WCDMA_II_PCS_1900. My phone disconnected from the network and wouldn't reconnect. I rebooted then used the hidden menu to reset the phone to AWS 1700 and did a search for my network provider and reconnected.
I confirmed this through page 3 of Engineering Mode. When the phone's radio band was the usual one, AWS 1700, page 3 of Engineering Mode stated:
SW EnableBand: 0x0000000102000000
after I changed the radio band, page 3 of Engineering Mode stated:
SW EnabledBand: 0x0000000100400000
I suppose that proves the modem is able to be set to alternative frequencies but I can't test them because my SIM is only for the AWS 1700 band.

So does this mean what I think it means?

richie390 said:
So does this mean what I think it means?
Click to expand...
Click to collapse
Yes, maybe.

Core Memory said:
I decided to take a chance with bricking my phone's radio modem by using a serial terminal and an AT command for the Qualcomm modem to change the modem's radio band. I succeeded!
I used the example AT command in my other post http://forum.xda-developers.com/showthread.php?t=1412064 about the Qualcomm modem AT commands and temporarily changed the radio bands to WCDMA_I_IMT_2000 and WCDMA_II_PCS_1900. My phone disconnected from the network and wouldn't reconnect. I rebooted then used the hidden menu to reset the phone to AWS 1700 and did a search for my network provider and reconnected.
I confirmed this through page 3 of Engineering Mode. When the phone's radio band was the usual one, AWS 1700, page 3 of Engineering Mode stated:
SW EnableBand: 0x0000000102000000
after I changed the radio band, page 3 of Engineering Mode stated:
SW EnabledBand: 0x0000000100400000
I suppose that proves the modem is able to be set to alternative frequencies but I can't test them because my SIM is only for the AWS 1700 band.
Click to expand...
Click to collapse
I'll give it a swirl, I have two SIM Cards from two different providers.

ttaidapos said:
I'll give it a swirl, I have two SIM Cards from two different providers.
Click to expand...
Click to collapse
It is important to use 0 (zero) in the AT control string so that the change is temporary and the setting will revert back to normal when you reboot your phone.
Download RSterm and use it, that's what I used:
http://www.roundsolutions.com/techdocs/#tools

Related

Qualcomm mdm6600 (GOBI) AT Commands

This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.
That's awesome, man! Hopefully it works when you test it tomorrow. Good luck
jwells777 said:
This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.
Click to expand...
Click to collapse
I am the OP of the thread you referred to, the one about the Qualcomm modem commands. I am very pleased that you were able to use that information to achieve the enabling of other cell radio bands which the modem is capable of but were not available for use. I tried too and was partially successful but not to the point of enabling the recognition of cell service providers which operate on those other bands. I hope that you have succeeded in achieving full operation of the 850 and 1900 MHz UMTS bands which will enable owners of the G2X/P999 phones to connect to networks which use those bands. I am looking forward to your next post.
Core Memory said:
I am the OP of the thread you referred to, the one about the Qualcomm modem commands. I am very pleased that you were able to use that information to achieve the enabling of other cell radio bands which the modem is capable of but were not available for use. I tried too and was partially successful but not to the point of enabling the recognition of cell service providers which operate on those other bands. I hope that you have succeeded in achieving full operation of the 850 and 1900 MHz UMTS bands which will enable owners of the G2X/P999 phones to connect to networks which use those bands. I am looking forward to your next post.
Click to expand...
Click to collapse
If I am understanding correctly, this would allow G2x phones to work with the new T-Mobile LTE 1900 Mhz signal, correct? Or am I way off base?
I believe it's AT&t's networks
jcbofkc said:
If I am understanding correctly, this would allow G2x phones to work with the new T-Mobile LTE 1900 Mhz signal, correct? Or am I way off base?
Click to expand...
Click to collapse
No. The LTE capability is not part of the Qualcomm mdm6600.
http://en.wikipedia.org/wiki/Qualcomm_Gobi
MDM6600™:
Multi-mode modem
HSPA+ with data rates of up to 14.4 Mbit/s
CDMA2000® 1xEV-DO Rev. A/Rev. B support
GPS functionality, including support for Assisted GPS
Since he hasn't posted anything since, it probably didn't succeed. I also sent him a PM which he didn't reply to.
jwells777 said:
This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.
Click to expand...
Click to collapse
Unfortunately, as suggested by Core Memory above, I have not been completely successful in this investigation; however, I will post what I discovered along the way for the benefit of others. Perhaps someone else can pickup where I left off and get things working.
First, a summary of the final status:
1) Updated NV Items to enable 850 MHz and 1900 MHz bands
2) Was able to see 850 MHz UMTS providers under the "Search Available Networks"
3) It appeared that a connection was being made to the UMTS provider based upon both the signal strength monitor in "About phone" and the Engineering Mode page that provides data regarding 3g connections
4) In the Engineering Mode page, it seemed that the device was trying to connect (login?) to the network but was not being successful with the login
5) When at the lock screen and forcing the connection to the 850 MHz UMTS network, the "Emergency Only" text appears further suggesting that the connection is working but that my configuration for the network may be wrong.
6) No 1900 MHz providers ever appeared in the network lists while searching. I am not sure whether this is because this band was not functioning or if it was because no such provider existed since I am not terribly familiar with the coverage where I am currently at.
For those who wish to follow this path and test in their own local markets, please see the following steps required to reach this point:
Tools needed:
1) QPST 2.7 (Build 366 or later)
2) QXDM 3.12.714 (or later)
Steps:
1) Install necessary tools on your computer.
2) Enable USB debugging (Settings-->Applications-->Development)
3) Connect phone to PC
4) In the hidden menu (1809#*999#), ensure that Port Setting is configured to CP USB.
5) Launch QPST Configuration
6) Under Ports, select Add New Port.
7) Locate your device and enable the port. (NOTE: There may be two ports available to you here. I believe that you want to use the one that is for Serial / USB/QC connections.
8) From QPST Configuration, launch the "Software Download" tool under the "Start Clients" heading.
9) From here, create a backup QCN file. This backup may or may not enable you to recover from making a mistake later. Also, there is alot of information in this file if you care to navigate through it.
10) Launch QXDM Professional.
11) View-->New-->Common-->NV Browser
12) Options-->Communications-->Target Port (Select your phone)
13) The previous step should have "enabled" the NV Browser lower pane
14) Read and record the following NV Items
a) (441) Band Class Preference (0xFFFF)
b) (946) Expand Band Preference 16 to 32 Bits (0xBFFF)
c) (2954) Bits 32 to 63 of Band Pref (0xFFFFFFFF)
d) (1877) RF Band Configuration (0x0000000002680380)
15) Update item 1877 per discussion below
16) Reboot phone
17) It may be necessary to configure the Modem Setting in the hidden menu to reflect the additional bands.
NV Item configuration discussion:
I am no mobile phone programming expert (< 4 hours playing with them at this level to date); however, as near as I can tell, item 1877 configures the hardware of the modem while items 441, 946, and 2954 appear to be some type of masking bits regarding what bands to prefer. As such, I believe that the original value of item 1877 enables the following RF bands:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:25) WCDMA Band IV (1700)
If you set 1877 to 0x000000006E80380, it should enable the following:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:23) WCDMA Band II (1900)
(Bit:25) WCDMA Band IV (1700)
(Bit:26) WCDMA Band V (850)
If anyone succeeds in getting any further using this information, I would be very curious to hear of your success. Also, please do share with the community such that we can collectively move forward.
Disclaimer: I accept no responsibility for any damage that you may cause to your phone with these tools or procedures. Please note that these tools give you fairly low-level access to your system that enable you to significantly mess things up. Further, please note that modifying the radio bands on this device may void your warranty and/or be in violation of local regulations as set by your local authority (e.g., the FCC).
jwells777 said:
Unfortunately, as suggested by Core Memory above, I have not been completely successful in this investigation; however, I will post what I discovered along the way for the benefit of others. Perhaps someone else can pickup where I left off and get things working.
First, a summary of the final status:
1) Updated NV Items to enable 850 MHz and 1900 MHz bands
2) Was able to see 850 MHz UMTS providers under the "Search Available Networks"
3) It appeared that a connection was being made to the UMTS provider based upon both the signal strength monitor in "About phone" and the Engineering Mode page that provides data regarding 3g connections
4) In the Engineering Mode page, it seemed that the device was trying to connect (login?) to the network but was not being successful with the login
5) When at the lock screen and forcing the connection to the 850 MHz UMTS network, the "Emergency Only" text appears further suggesting that the connection is working but that my configuration for the network may be wrong.
6) No 1900 MHz providers ever appeared in the network lists while searching. I am not sure whether this is because this band was not functioning or if it was because no such provider existed since I am not terribly familiar with the coverage where I am currently at.
For those who wish to follow this path and test in their own local markets, please see the following steps required to reach this point:
Tools needed:
1) QPST 2.7 (Build 366 or later)
2) QXDM 3.12.714 (or later)
Steps:
1) Install necessary tools on your computer.
2) Enable USB debugging (Settings-->Applications-->Development)
3) Connect phone to PC
4) In the hidden menu (1809#*999#), ensure that Port Setting is configured to CP USB.
5) Launch QPST Configuration
6) Under Ports, select Add New Port.
7) Locate your device and enable the port. (NOTE: There may be two ports available to you here. I believe that you want to use the one that is for Serial / USB/QC connections.
8) From QPST Configuration, launch the "Software Download" tool under the "Start Clients" heading.
9) From here, create a backup QCN file. This backup may or may not enable you to recover from making a mistake later. Also, there is alot of information in this file if you care to navigate through it.
10) Launch QXDM Professional.
11) View-->New-->Common-->NV Browser
12) Options-->Communications-->Target Port (Select your phone)
13) The previous step should have "enabled" the NV Browser lower pane
14) Read and record the following NV Items
a) (441) Band Class Preference (0xFFFF)
b) (946) Expand Band Preference 16 to 32 Bits (0xBFFF)
c) (2954) Bits 32 to 63 of Band Pref (0xFFFFFFFF)
d) (1877) RF Band Configuration (0x0000000002680380)
15) Update item 1877 per discussion below
16) Reboot phone
17) It may be necessary to configure the Modem Setting in the hidden menu to reflect the additional bands.
NV Item configuration discussion:
I am no mobile phone programming expert (< 4 hours playing with them at this level to date); however, as near as I can tell, item 1877 configures the hardware of the modem while items 441, 946, and 2954 appear to be some type of masking bits regarding what bands to prefer. As such, I believe that the original value of item 1877 enables the following RF bands:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:25) WCDMA Band IV (1700)
If you set 1877 to 0x000000006E80380, it should enable the following:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:23) WCDMA Band II (1900)
(Bit:25) WCDMA Band IV (1700)
(Bit:26) WCDMA Band V (850)
If anyone succeeds in getting any further using this information, I would be very curious to hear of your success. Also, please do share with the community such that we can collectively move forward.
Disclaimer: I accept no responsibility for any damage that you may cause to your phone with these tools or procedures. Please note that these tools give you fairly low-level access to your system that enable you to significantly mess things up. Further, please note that modifying the radio bands on this device may void your warranty and/or be in violation of local regulations as set by your local authority (e.g., the FCC).
Click to expand...
Click to collapse
You've made a lot of progress, your information is very useful. I'll use it for further exploration.
Did you test it with a SIM card with a data plan which uses those bands?
Do you know how to use QPST and/or QXDM flash the phone with a binary file for the baseband?
I did try to connect using sim cards with data plans on the specified frequencies.
As for flashing a baseband, it seems that you should be able to do so with these tools; however, I didn't look into it.
Sent from my LG-P999 using XDA
jwells777 said:
I did try to connect using sim cards with data plans on the specified frequencies.
As for flashing a baseband, it seems that you should be able to do so with these tools; however, I didn't look into it.
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
The following was done while my phone is using the WIND SIM card which is my carrier and is restricted to AWS (WCDMA 1700) and Network Mode is set to WCDMA only.
I used your instructions to enable the UMTS 850 and 1900 MHz bands. One clarification is necessary. The HexaDecimal number 0x6e80380 = Decimal number 115868544 = Binary number 0b110111010000000001110000000.
The binary number is read from right to left with the first binary bit on the extreme right designated as bit 0 of the 27 bit sequence. The binary number is the key to the hexadecimal number used to program the RF Band Configuration in QXDM. For example, according to Jwells777, bit 23 is set to binary 1 to enable WCDMA Band II (band 2) and bit 26 is set to binary 1 to enable WCDMA band V (band 5). Refer to Jwells777 post in this thread which states the binary bits used to set the phone to use the phone's bands. Here's a binary-decimal-hexadecimal converter: http://www.mathsisfun.com/binary-decimal-hexadecimal-converter.html
The HexaDecimal number 0x000000006E80380 can be entered directly for setting "RF Band Configuration" at line 1877 in the NV browser. The HexaDecimal number is converted into the decimal number 115868544 which will appear when another read is performed. In Engineering Mode, the SW Enabled Band reading of my phone changed from 0x0000000102400000 to 0x0000000106C0000. When I changed the phone's setting to Automatic Band Selection, the SW EnableBand reading changed to 0x0000000106e80180. Changing the settings for Band Selection and/or Network Mode will change the SW EnableBand reading on page 5 of Engineering Mode.
In Band Selection, I enabled WCDMA 1900 which caused my connection to WIND's AWS 1700 to drop. I Looked at page 5 (RF Calibration) of Engineering Mode to see which bands were activated and found:
WCDMA1 : 22.37, 22.45, 0.00
WCDMA2 : 0.00, 0.00, 0.00
WCDMA4 : 23.47, 23.19, 0.00
WCDMA5 : 0.00, 0.00, 0.00
WCDMA8 : 0.00, 0.00, 0.00
GSM850 : 32.70, 32.63, 0.00
GSM900 : 32.76, 32.71, 0.00
DCS1800 : 29.40, 29.50, 0.00
PCS1900 : 30.10, 29.90, 0.00
LOSS:
-1.06, -1.18, -1.24
-1.54, -1.64, -1.74
-1.80, -1.79, -2.01
-2.11, -2.21
The same readings occur with Band Selection set to Automatic or manually to any other band except AWS which is the UMTS band the phone was set up to use at the factory.
This indicates that WCDMA2, 5, and 8 are not RF calibrated but DCS 1800 and PCS 1900 are RF calibrated.
I also found that
When I do a network search, it finds WIND and Public Mobile which operate on UMTS 1700 (AWS) and Bell and Telus which operate on UMTS 850 and 1900 but not Rogers which also operates on UMTS 850 and 1900. (Rogers does appear if I search for GSM networks too.)
"In Canada, UMTS coverage is being provided on the 850 MHz and 1900 MHz bands on the Rogers and Bell-Telus networks. Bell and Telus share the network. Recently, new providers Wind Mobile, Mobilicity and Videotron have begun operations in the 1700 MHz band."http://en.wikipedia.org/wiki/Universal_Mobile_Telecommunications_System
That indicates it is able to receive signals on UMTS 850 (Band 5) and 1900 (Band 2) which should enable the phone to see TELUS, Bell and Rogers.
http://en.wikipedia.org/wiki/UMTS_frequency_bands
When I select connection to Bell or TELUS, the phone tries to register but fails with the message: "Unable to connect to this network at this time. Please try again later." That message is generated by the phone's firmware/software, not the network.
I haven't yet tested the phone with a SIM Card for Rogers or Bell or TELUS. A friend has a Rogers SIM card with a data plan but I don't think it will be of any use to test the phone's supposed additionally enabled bands.
Conclusions:
Cognitive overload.
I am finding this quite confusing because of the variable terminology used such as UMTS, WCDMA, PCS, DCS, and the various bands and transmit and receive frequencies used for each protocol. If someone could make more sense out of the information I've provided, that would be very helpful.
Questions:
Engineering Mode Page 5 (RF Calibration) indicate that WCDMA Bands 2,5, and 8 are not RF calibrated but DCS 1800 and PCS 1900 are. Does this mean that the phone will not transmit on the WCDMA Bands 2,5 and 8 because the RF calibration for transmitting is not available?
If anyone can add something useful to this thread, that would be greatly appreciated.
nvm sorry mood pls delete this
Glad to hear that someone else was able to see the other bands using the information that I posted.
I would also add that I am able to see att in the US but not connect. I receive the same error mentioned by CoreMemory. If anyone has access to an O2X and could provide the qcn dump, it may help configure any other NV Items related to the new bands that we have missed.
Sent from my LG-P999 using XDA
HELP
Core Memory said:
You've made a lot of progress, your information is very useful. I'll use it for further exploration.
Did you test it with a SIM card with a data plan which uses those bands?
Do you know how to use QPST and/or QXDM flash the phone with a binary file for the baseband?
Click to expand...
Click to collapse
hi i'm trying but when insert the code 1809#*999# send me a error " MMI CODE CANDELED "
jwells777 said:
Glad to hear that someone else was able to see the other bands using the information that I posted.
I would also add that I am able to see att in the US but not connect. I receive the same error mentioned by CoreMemory. If anyone has access to an O2X and could provide the qcn dump, it may help configure any other NV Items related to the new bands that we have missed.
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
I wonder if the qcn dump from the O2X is useful since it has a different modem, it doesn't have the Qualcomm MDM6600 which is in the G2X/P999.
If we could get a qcn dump from another phone which uses the MDM6600 on the bands we want to get working, that would be a lot of help.
The Qualcomm Mobile Data Modem Software Interface 80-Vr001-2 manual would be very useful too.
Core Memory said:
If anyone can add something useful to this thread, that would be greatly appreciated.
Click to expand...
Click to collapse
i think if you post that into LG Optimus 2x forums with some instructions and explaining them. we could get the configuration from them. Soo you could go and ask them and explain them how to get those codes.
EDIT: NVM i just REAd your last post.
If you guys need a tester for anything, im all ears
Core Memory said:
I wonder if the qcn dump from the O2X is useful since it has a different modem, it doesn't have the Qualcomm MDM6600 which is in the G2X/P999.
If we could get a qcn dump from another phone which uses the MDM6600 on the bands we want to get working, that would be a lot of help.
The Qualcomm Mobile Data Modem Software Interface 80-Vr001-2 manual would be very useful too.
Click to expand...
Click to collapse
I didn't think of the fact that the modems are different. I agree with you that it would probably be more useful to have the dump from a phone with the 6600 that is configured for the new bands
Sent from my LG-P999 using XDA
jwells777 said:
I didn't think of the fact that the modems are different. I agree with you that it would probably be more useful to have the dump from a phone with the 6600 that is configured for the new bands
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
I don't know of anyone with one. As well, the file contains info which the person who supplies it would have to trust us not to use.
we can ask those guys for the configuration codes it seems they use the same modem or item.
http://forum.xda-developers.com/showthread.php?t=992635#12257150

3G USB modem, all commands.....

ZTE AT-commands
disable/enable flash cd-drive
AT+ZCDRUN=8 disable
AT+ZCDRUN=9 enable
stay online
AT+ZOPRT=5
check net-/SIMlock
AT+ZSEC?
answer: <SEC_STATUE>,<SEC_ITEMS>
< SEC_STATUE >:
0 Initializing the encryption (Insignificant SEC_ITEMS)
1 Network Lock error. (Insignificant SEC_ITEMS)
2 Network Locked
3 Unlocked or correct MCC/MNC
<SEC_ITEMS>:
0 No action
1 Network lock
2 (U)SIM card lock
3 Network Lock and (U)SIM card Lock
Unlock
+ZNCK="unlock-code"
+ZNCK?
Unlock residual time 0-5
Report signal strength +ZRSSI
Syntax
+ZRSSI parameter command syntax
Command Possible response(s)
+ZRSSI <CR><LF>+ZRSSI:<rssi>,<ecio>,<rscp><CR><LF><CR><LF>
OK<CR><LF>
<CR><LF>+CME ERROR: <err><CR><LF>
Description
This command is used to report signal strength.. Notice the command is used only in platform
6290 and 6246.
Defined values
3G network(registered to 3G network)
+ZRSSI: rssi,ecio,rscp
The unit of Rscp is 0.5dbm ( in 0.5 dBm step with no sign).
The unit of Ecio is 0.5db ( in 0.5 dB step with no sign).
The relation is: 2*rssi=rscp-ecio
e.g.
+ZRSSI: 49,8,106
Rssidbm = -rssi = -49dbm
Eciodb = -ecio/2= -4db
Rscpdbm = - rscp /2= -53dbm
2G network(there is no ecio and rscp value when registered in 2G network ,so set
value of 1000)
e.g.
+ZRSSI: rssi,1000,1000
No network e.g.
+ZRSSI :OK
Notice! the command is used only in platform 6290 and 6246.
Set Operational Mode
AT+ZSNT=0,0,0 (Auto) - Default
AT+ZSNT=1,0,0 GPRS Only
AT+ZSNT=2,0,0 3G Only
AT+ZSNT=0,0,1 GPRS Preferred
AT+ZSNT=0,0,2 3G Preferred
Query Operational Mode
AT+ZPAS?
<CR><LF>+ZPAS:<network>,<srv_domain><CR><LF>OK<CR><LF>
<network>: the type of current network
No Service
Limited Service
GPRS
GSM
UMTS
EDGE
HSDPA
<srv_domain>: service domain
CS_ONLY: CS domain service available.
PS_ONLY: PS domain service available.
CS_PS: CS&PS domain service available.
CAMPED: camped in a cell.
example
Command: AT+ZPAS?
Response: +ZPAS: "GPRS","CS_PS"
OK
Set Band Status +ZBANDI
at+zbandi=0 • Automatic (Auto) - Default
at+zbandi=1 • UMTS 850 + GSM 900/1800
at+zbandi=2 • UMTS 2100 + GSM 900/1800 (Europe)
at+zbandi=3 • UMTS 850/2100 + GSM 900/1800
at+zbandi=4 • UMTS 850/1900 + GSM 850/1900
Notice! the command is used only in platform 6290 and 6246.
HUAWEI MODEM
AT
OK
ATX
OK
ATI
OK
AT^U2DIAG=0
OK
Unlock
+ZNCK="unlock-code"
+ZNCK?
Unlock residual time 0-5
Click to expand...
Click to collapse
This is for PIN code? I do not remember and I have two attempts.

[Q] z5s 3g modem

I have a ZTE nubia Z5S.
It is great. but 3g is only in 2600 mhz. So only edge for me for now.
Looking around I found some people are trying to unlock the modem and they says the modem supports other bands.
Any idea how to unlock the modem, a new firmware ?
Commands to check the modem?
wait so the z5s gets released in at&t and get a rom? ( I know is a long shot)
Some people is asking roms with the bands released ( someone in miui was working the modem)
Any guide to learn is welcome.
According to http://www.nubia.cn/productdetail.php?id=335, Nubia Z5S supports 3G with the UMTS/WCDMA protocol on the 2100MHz spectrum.
When you say 2600MHz, do you mean LTE or 3G?
Anyway, the WTR1605 tranceiver used on Nubia Z5S has no LTE support, otherwise is capable to handle many UMTS bands, but ZTE might have locked down some. This is the good news.
you are right,
In my country we need:
CLARO
GSM: 850MHz
UMTS/HSDPA: 850Mhz
MOVISTAR (Virgin Mobile)
GSM: 850MHz
UMTS/HSDPA: 850Mhz
TIGO (Uff, UNE y ETB)
GSM: 1900MHz
UMTS/HSDPA: 1900MHz
now ready to learn about unlock bands
anyone has experience with the baseband switcher?
It is possible to use it to change baseband if the z5s is rooted?
Or I need to install cyanagenmod and then use the baseband switcher?
I tried:
to open a terminal:
adb shell
then:
am start -n com.android.settings/.BandMode
I tries to open a window in the cell but the window is empty
I did the command from terminal after su, so the command ran as superuser.
But the same result a window with tittle but no menus.
It looks like that command is for mtk cpus.
Anyone know how to change the bands to automatic snpadragons cpus?
FInally I am getting some place,
I got to the wlan settings, I typed the code *#*#4636#*# inside notepad and copy the code.
Paste in the phone.
I got the menu:
Testing
Phone Information
Battery Information
Usage Statics
Wlan information
I go, WLAN information -> WLAN API
I got the menu:
WLAN settings
disableNetwork
disconnect
enableNetwork
getconfiguredNetworks
getConnectionInfo
Half the menus are not working, but If got to enableNetwork asks:
Input
Enter Network Id:
SO Anyone knows What codes I need to use there?
well, I got the list of the bands supported by the modem using att commands:
AT$QCBANDPREF=?
$QCBANDPREF: (0-1),
"1.BC0_A"
"2.BC0_B"
"3.BC0"
"4.BC1"
"5.BC3"
"6.BC4"
"7.BC5"
"8.GSM_DCS_1800"
"9.GSM_EGSM_900"
"10.GSM_PGSM_900"
"11.BC6"
"12.BC7"
"13.BC8"
"14.BC9"
"15.BC10"
"16.BC11"
"17.BC12"
"18.BC14"
"19.BC15"
"20.BC16
"21.GSM_450"
"22.GSM_480"
"23.GSM_750"
"24.GSM_850"
"25.GSM_RGSM_900"
"26.GSM_PCS_1900"
"27.WCDMA_I_IMT_2000"
"28.WCDMA_II_PCS_1900"
"29.WCDMA_III_1700 "
"30.WCDMA_IV_1700"
"31.WCDMA_V_850"
"32.WCDMA_VI_800 "
"33.WCDMA_VII_2600"
"34.WCDMA_VIII_900"
"35.WCDMA_IX_1700"
"36.WLAN_US_2400 "
"37.WLAN_JAPAN_2400"
"38.WLAN_EUROPE_2400"
"39.WLAN_SPAIN_2400"
"40.WLAN_FRANCE_2400 "
"41.WLAN_US_5000"
"42.WLAN_JAPAN_5000"
"43.WLAN_EUROPE_5000"
"44.WLAN_SPAIN_5000"
"45.WLAN_FRANCE_5000 "
"46.Any"
Any help what this mean?

CM12 - How to choose AWS 1700 MHz?

I bought my 1+ from the website and it was working on Wind's network (1700/2100 MHz) until just now. I flashed CM12 nightly and realized I couldn't make phone calls (data and WiFi were fine). So I followed a thread on XDA and changed my band to USA/Europe (*#*#4636#*#*), but none of these have 1700 or 2100 selected. Now, my phone won't detect Wind's network in Settings > Network Operators and data/SMS/voice won't work.
I tried many different modems (CM12, 44S, etc.) but it only shows Bell, Telus, Rogers on the network scan. Any ideas on how to get Wind back?
Update, here's my analysis (this is for CM12 nightly):
In the stock 44S ROM there was an option to choose "Auto" for GSM/UMTS band under the phone testing menu (open Phone, dial *#*#4636#*#*, click Phone Info). Auto lets the phone pick up frequencies that are not specified in the other 2 choices: USA and Europe, such as 1700 MHz and 2100 MHz.
If Europe or USA is chosen for the GSM/UMTS band, there is no way to go back to Auto and the phone is locked out of connecting to networks running on the 1700 and 2100 MHz frequencies, such as Wind Mobile in Canada and other AWS providers. This is urgent and the only way to fix it was to flash back to stock, choose Auto, and reflash later versions. Changing ROMs or modems did not work.
Does anyone else have a similar issue (you can check whether or not you have the Auto option in the testing menu) or is there a way to fix this that I'm oblivious to? I've raised a JIRA to Cyanogenmod.

How to:- Enable LTE+ on SD617 based Moto G4 Plus

As we know here https://www.qualcomm.com/products/snapdragon/processors/617 , Moto G4 SOC supports 2CA of different LTE band combinations. We were able to enable band 41, band 20 and band 28 using QXDM until the December update. The DEC update seems to lock the modem to the OEM based LTE bands so the new bands cannot be added on the latest firmware.
Motorola has not provided systemUI support on stock firmware for LTE+.
Requirements:-
1. A PC with Motorola drivers
2. Stock firmware rooted/unrooted Moto G4/plus
3. QXDM software (Search on google it is available everywhere)
4. QPST software (maybe needed to map COM ports)
5. Any custom ROM 8.1 after the above process
Note 1:- Please take a backup of NV (QCN) that contains the IMEI via QPST software. It hardly takes few minutes. So there is no risk of 'baseband unknown' or loss of signals.
Process:-
1. With no SIM cards in any slots and airplane mode ON, boot the phone into BP Tools from bootloader menu.
2. Connect the phone to PC and map the correct Motorola Diag port no xx
3. Open QXDM and go to communication and click to the COM port
4. Select NV browser and enter spc 000000 in the command line
5. Go to RF LTE from the category filter on the right side.
6. Scroll down till item number 70975
7. Read item number 70977 RFNV LTE B3 CA BC CONFIG and write 20 in the field below. ( 20 = 2CA band3 + band5)
8. Move on to 70979 RFNV LTE B5 CA BC CONFIG and write 549755813904 in the field below. ( 549755813904 = 2CA band5 + band 40)
9. Continue to 71014 RFNV LTE B40 CA BC CONFIG and write 549755813892 in the field below. ( 549755813892 = 2CA band40 + band 3)
10. Install QPST and select efs explorer, enter SPC 000000. Go to item_files>modem>lte>common. Delete the file ca_disable and copy new ca_disable after unzipping ca_disable.zip from here. (the original file has CA disable=YES which is deleted in my attached file)
11. Power off the phone, disconnect the cable, insert sim card (JIO) and turn off airplane mode.
12. There is no sign of LTE+ in stock firmware except slight improvement in data speeds.
13. Install custom ROM 8.1 ( I installed AICP athene 8.1 20180310)
I am receiving LTE+ signals whenever the phone latches to band3 and band 5. There is no LTE+ in band 40 in my location currently.
Since the modem firmware and FSG isnt ideally configured for 2CA, we are not able to see secondary carrier signal or sec antenna in Network Signal Guru but I am getting speeds above 85 MBps while latching to the above bands.
Note 2:- I take no responsibility for whatever happens to your device, PC or anything. This guide is for enthusiasts who are willing to take little risk. Do not write 3CA values anything other than the values written above because the SD617 SOC supports 2CA only and not 3CA, not 3+5+40.
Similar threads:-
https://forum.xda-developers.com/lenovo-p2/how-to/enabled-4g-ca-p2-t3707584
https://zukfans.eu/community/threads/enable-carrier-aggregation-lte-a-on-zuk-z2-qualcomm-phone.7388/
In my experience, when I "unlocked" the LTE band 20 on my US XT1644, it was still not in use in that area, dropping back to 3G. I assume that's because the actual RF amplifier head-end is not present, even if the chipset was tricked to "support" it.
SoNic67 said:
In my experience, when I "unlocked" the LTE band 20 on my US XT1644, it was still not in use in that area, dropping back to 3G. I assume that's because the actual RF amplifier head-end is not present, even if the chipset was tricked to "support" it.
Click to expand...
Click to collapse
You can verify band 20 RF capabilities in RFNV LTE B20 CHAN in RF LTE section using qxdm.
For LTE 20 I have re-calculated and changed only the value of:
06828 LTE BC Config LTE_BC_CONFIG_type.lte.config
But after that. it just didn't actually pick up the LTE band 20 (in an area where a native EU GSM phone was), so some hardware piece is missing for the 800MHz frequency in the US version. I assume that's the same for modifying a non-US with US bands too.
Now, about the CA... I am on a Verizon Wireless MVNO, so I blamed that for not having CA (I still get 60-68Mbps DL speeds). The LTE bands for VZW would be 2, 4, 13
In EU I have native SIM (Vodafone) and I get 40-60Mbps too...
Checked right now - the US version (XT1644) doesn't have items with ID higher than 65673. So none of those "LTE CA" appear.
Changing the LTE item that adds bands seems to be still working - the changed value remains after reboot.
QPST identify device as no phone.also command line is greyed out and nothing can be entered.? Any help.!
kidjohny said:
QPST identify device as no phone.also command line is greyed out and nothing can be entered.? Any help.!
Click to expand...
Click to collapse
Identify the com port from the PC Device manager. With QPST configuration opened, select any one com port from the device manager. One like Motorola BP USB com port, Mot qc diag port and Motorola AP com port. The device identity like ESN number should be visible in QPST configuration.
SoNic67 said:
For LTE 20 I have re-calculated and changed only the value of:
06828 LTE BC Config LTE_BC_CONFIG_type.lte.config
But after that. it just didn't actually pick up the LTE band 20 (in an area where a native EU GSM phone was), so some hardware piece is missing for the 800MHz frequency in the US version. I assume that's the same for modifying a non-US with US bands too.
Now, about the CA... I am on a Verizon Wireless MVNO, so I blamed that for not having CA (I still get 60-68Mbps DL speeds). The LTE bands for VZW would be 2, 4, 13
In EU I have native SIM (Vodafone) and I get 40-60Mbps too...
Click to expand...
Click to collapse
Band x CA list is in RF LTE menu not near items 65xxxx or 6828/6829
dr.faramroze said:
Identify the com port from the PC Device manager. With QPST configuration opened, select any one com port from the device manager. One like Motorola BP USB com port, Mot qc diag port and Motorola AP com port. The device identity like ESN number should be visible in QPST configuration.
Click to expand...
Click to collapse
It's OK now..but no RF LTE option..in category field.
dr.faramroze said:
Band x CA list is in RF LTE menu not near items 65xxxx or 6828/6829
Click to expand...
Click to collapse
There is no "RF LTE" category.
Also, that category would not matter at all as long as you have the actual ID number of the NV location (70975 in your example). As I said, the XT1644 that I have doesn't go higher than location number 65673.
Can u specify the diag driver u used.Where can I get that.?
In your screenshot qxdm identify it as msm8926.But in mine it shows 4110.could that be a problem.?
You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
https://drive.google.com/file/d/0Bw01zu5q0Cg-aFFEbFU4ZE85cEU/edit
https://www.4shared.com/zip/YGncBw36ce/QXDMWIN314_Installer-011443.html
https://www.4shared.com/rar/zS1_Gczdei/QXDMWIN31411741U.html#
https://www.4shared.com/rar/irXxwa_Gca/QXDMWIN40001241U.html
https://www.4shared.com/rar/xYg-VTi3ei/QDARTWIN48000393F.html
https://www.4shared.com/rar/QpBdFX9Kei/QPST_27460.html
Install version 594 for unlimited access https://drive.google.com/file/d/0B4ciwAYRi6hXUy1mU19UVlJ5OEU/view
when i try to boot into bp tools, it just boots into android instead
BP Tools mode is diag Com port mode in android OS booting system. It is normal android with serial port.
dr.faramroze said:
You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
https://www.4shared.com/rar/zS1_Gczdei/QXDMWIN31411741U.html#
https://www.4shared.com/rar/irXxwa_Gca/QXDMWIN40001241U.html
https://www.4shared.com/rar/xYg-VTi3ei/QDARTWIN48000393F.html
https://www.4shared.com/rar/QpBdFX9Kei/QPST_27460.html
Click to expand...
Click to collapse
Great. Thanks....its all working fine now.able to get LTE+.But no big difference in speed here in my area..!...also u missed the starting location to find ca_disable file.item_files is under nm(or nvm or nv..something like that.) folder.Have a Gud Day.Appreciate ur work.
dr.faramroze said:
You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
Click to expand...
Click to collapse
The newer download in the first post was corrupted, I will try yours when I get at my PC in a couple of days (I am traveling now).
SoNic67 said:
The newer download in the first post was corrupted, I will try yours when I get at my PC in a couple of days (I am traveling now).
Click to expand...
Click to collapse
There are many versions of QXDM now in my thread above. Make sure you use atleast 594.
For those who want to tinker with additional LTE bands. Here are the stock values of Moto G4/plus.
MOTO G4 PLUS
441= 0xFFFF
946= 0x3FFF
1877= 562950027346304
2954= 4294967295
4548= 562950024724480
6828= 549755814037
6829= item inactive
65633= 0x0000008000000091
Always make a .qcn backup in QPST>software download>backup. Fastboot flash modem nonhlos will also restore original values and loss of signal. Let me know if anyone is able to achieve additional bands like band 41, band 20, band 28 etc. It will be seen by Network Signal Guru.
dr.faramroze said:
For those who want to tinker with additional LTE bands. Here are the stock values of Moto G4/plus.
MOTO G4 PLUS
441= 0xFFFF
946= 0x3FFF
1877= 562950027346304
2954= 4294967295
4548= 562950024724480
6828= 549755814037
6829= item inactive
65633= 0x0000008000000091
Always make a .qcn backup in QPST>software download>backup. Fastboot flash modem nonhlos will also restore original values and loss of signal. Let me know if anyone is able to achieve additional bands like band 41, band 20, band 28 etc. It will be seen by Network Signal Guru.
Click to expand...
Click to collapse
Careful, the LTE bands and numbers are different for different markets! US bands are different from EU and Indian models.
I have tried the new software. On the US version, at those fields, I get "NV Status Error Received: No such file or directory"

Categories

Resources