Related
I am NOT responsible if you brick your phone while following the instructions given below!!
Credit goes to @randrew87 and @Alex_XV6700
Findings so far for ZV9 Update:
First, the rooted .img can be found here.
Note: I was on ZV6 and followed the instructions here: http://forum.xda-developers.com/g-flex2/general/return-to-stock-ls996-stock-img-t3217089 - to get back to UN-root for ZV6. Once I was un-rooted, I did all OTA updates to ZV9. If you enabled bands using the "Shortcut Master" app in ZV6 before unrooting, all bands enabled will stay when upgraded to ZV9.
Simply follow the same steps for previous ZV6 updates to install ZV9 root.img:
1) Download LG Flex 2 USB Driver (google, this one is easy - it's a 10.9MB LG driver)
2) Download LG_Root.zip from here: https://www.androidfilehost.com/?fid=24052804347788843
3) Go to Settings -> General -> About Phone -> Software Info -> and tap Build Number 7 times until Developer mode is enabled.
4) Unzip the zv9 rooted .img
5) Plug in the phone to computer and copy the firmware file ZV9system.img (make sure to have the "ZV9system.img" file name!!) to the root folder.
6) Unzip the LG_Root.zip
7) Power off Phone, then press and hold volume up while plugging into computer to get into "download mode". Phone screen should show "download mode" briefly.
8) From LG_Root folder run "ports" bat file. it should show you which port the phone is connected to, you are looking for the port for LGANDNETDIAG1, in my case it was COM4, it will be different for you
9) Open a command prompt (windows - run > cmd) and go into the folder that you extracted LG_Root into (cd C:\directory\to\ LG ROOT)
10) Then run the following command "Send_Command.exe \\.\COM4" - No quotes, with COM4 replaced by the port you saw from step 8. You should see something that says "SPECIAL COMMAND: ENTER, LEAVE"
11) then type "id" and press enter (no quotes), you will see something like: uid=0(root) gid=0(root) context=u:r:recovery:s0, if you don't see this repeat step 10 until you do
12) Run following dd command: "dd if=/data/media/0/ZV9system.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0" no quotes
around the command
13) it will take a few minutes and bring you back to the "#" prompt. type LEAVE hit enter
14) your phone will reboot and you will be rooted on ZV9!
This is where things get tricky
Note: It is still being worked out how to get 4G LTE band re-enabled on ZV9!!
The latest testing instructions are given by @randrew87 here: http://forum.xda-developers.com/showpost.php?p=64122754&postcount=385 - When getting to step 2 (2. get your MSL code HERE follow parts I & II of the tutorial.), I was not able to run "Basic Flasher" due to Windows 10 issues. I could also not get my MSL by dialing ##443336772#. I ended up having to start a Sprint LiveChat and give them my phones MEID. I made up some technical excuse on why I needed my MSL number and the chat rep bought it and provided it to me!
Now that I had my MSL code, I was able to complete the steps @randrew87 provided:
3. on the dial pad tap ##3282# (this is data cofiguration hidden menu) and do the next procedure:
- tap lte, a notification window shows, tap edit, MSL code input window shows -->> enter it (is a six digit number)
- tap "LTE enabled" turn to on.
- tap "band priority" select ban 4 and change its value to "1"
-tap "LTE Roaming Enabled" turn to on.
Click to expand...
Click to collapse
However, LTE Roaming Enabled was grayed out for me. I could not figure out a way to turn it on. I am also not able to keep a consistent band for LTE when LTE DOES show up. I've attached some screenshots of the settings I currently have in place to give you all an idea of where I am at.
I wanted to start a new thread on this as I believe more people will be asking about LTE on the ZV9 update. If you are able to get 4G LTE working, please post how you did so!
http://i.imgur.com/vix0aIH.png (band priority screenshot) | http://i.imgur.com/oAgI6MB.png (LTE ##3282# settings) | http://i.imgur.com/XZElcz6.png (phones network settings > mobile networks) | http://i.imgur.com/gR9AiuP.png (LTE Discovery App results)
I was able to get 4G LTE back working on this build! I'll post more details soon.
Click to expand...
Click to collapse
Just got some time to put up what I did. Thanks to @csrow at - http://forum.xda-developers.com/showpost.php?p=64169534&postcount=23 I was able to get my 4G LTE back working on Band 4 with ZV9. Simply following the instructions below assuming you are on the rooted.img for ZV9 and are stuck on 3G still.
Downloaded "Shortcut Master" app from the Play store and searched for "com.lge.sprinthiddenmenu.iot.ltedataroam'. Run that app and enabled bands 2, 4, and 12 to cover the T-Mobile LTE bands. Also enabled data Roaming.
Whar are the major changes from ZV6 TO ZV9?
cadavar said:
Whar are the major changes from ZV6 TO ZV9?
Click to expand...
Click to collapse
This is what I was able to find:
http://pdadb.net/index.php?m=repository&id=1725&c=lg_ls996_g_flex2_android_5.1.1_lollipop_system_update_zv6
Code:
Version: ZV6
Author: Sprint
Category: ROM Update
Language: Multiple languages
Release Date: June 08, 2015
File Time: Jun 12, 15 15:02:35
File Views: 2349 views
ROM Update Details
Google Android 5.1.1 upgrade for Sprint G G Flex 2
Android version: 5.1.1
Build number: LS996ZV6
Description of Enhancements/Fixes
- OS upgrade to Android 5.1.1 (Lollipop)
- Factory Reset Protection
I also found - http://support.sprint.com/support/article/Find-and-update-the-software-version-on-your-LG-G-Flex2/WServiceAdvisory_542_GKB83857-dvc8760002prd#!/
Code:
Find and update the software version on your LG G Flex2
Last Updated: Nov 23, 2015
Software Updates - LG G Flex2
Software updates may be released in stages and can take several days for delivery.
If prompted that an update is available, follow the onscreen instructions to complete the installation.
Check the current device software:
Check the software version
Manually check for updates:
Check for software updates
Current version:
LS996ZV9
Version
Release Date
Description of Enhancements/Fixes
LS996ZV9 11/20/2015
Sprint Global Roaming
Minor UI Updates
App Updates
Bug Fixes
LS996ZV8 08/31/2015
Patch for critical security vulnerability ('Stagefright')
LS996ZV7 07/15/2015
Various bug fixes and enhancements
LS996ZV6 06/08/2015
OS upgrade to Android 5.1.1 (Lollipop)
Factory Reset Protection
LS996ZV5 03/25/2015
Bug Fixes
LS996ZV4 03/13/2015
Initial release
Hope this helps.
cadavar said:
Whar are the major changes from ZV6 TO ZV9?
Click to expand...
Click to collapse
Snapdragon patches and the "vulnerability" patches too, including stagefright and some others.
Great guide man! @tdorid44
Glad you could get there by reading and taking the time to fix the stuff for yourself. Thanks for quoting me and Randrew. We're all about helping the community :good:
Would this work with nTelos as99510a Software Version -- SCR Version is AS995z01_nTelos -- LMY47S Build Number
i cant wait to try this...i was able to get it to wrk on zv9 but i forgot what steps...b4 i bricked my phone
@tdorid44 how did you get your msl code from sprint...they keep asking for the previous owner ...and i also told them need the msl code for testing purposes
.....UPDATE......SPRINT GAVE IT TO ME....JUST SAY U DONT KNOW YOUR NUMBER OR WHO U GOT THE PHONE FROM...AND JUST SAY I ALL KNOW IS THE IMEI AND ALSO SAY AFTER SPRINT UPDATE MSL BOX KEEP POPPING UP....AND VOLIA....YOU GET YOUR MSL CODE.......I ALREADY REMEMBERED MINES...PRETTY SIMPLE TO REMEMBER
So is this for t-mobile or sprint? or either?
Also are there any changes to the Snapdragon going from zv8 - zv9?
So does this work on LS996ZV9? And Do I have to have to downgrade to ZV6 then install the ZV9 image?
Edit1:
Successfully rooted it and unlocked. But now Sprint handsfree activation starts randomly and I don't now how to remove it...
Edit2:
Since I was too lazy to unlock it with all the msl or spc thing. I used this method here
http://forum.xda-developers.com/g-flex2/help/managed-to-gsm-ls996-awaited-apn-t3090484/page7
By @tomtam and it also works well.
ZV9 TOT anyone ??????
working on the ls996, good work.
I am new to LG Gflex2...i followed your instructions but i get stuck at "dd is not recorgnised as an external command or operable program or batch file"
What to do!!!
AS soon as i hit search and it opens, when i attemtp to launch, it force closes. any solution for this?
tdorid44 said:
Just got some time to put up what I did. Thanks to @csrow at - http://forum.xda-developers.com/showpost.php?p=64169534&postcount=23 I was able to get my 4G LTE back working on Band 4 with ZV9. Simply following the instructions below assuming you are on the rooted.img for ZV9 and are stuck on 3G still.
Downloaded "Shortcut Master" app from the Play store and searched for "com.lge.sprinthiddenmenu.iot.ltedataroam'. Run that app and enabled bands 2, 4, and 12 to cover the T-Mobile LTE bands. Also enabled data Roaming.
Click to expand...
Click to collapse
Can i use this to root the zv9 ?
DRosales317 said:
So does this work on LS996ZV9? And Do I have to have to downgrade to ZV6 then install the ZV9 image?
Successfully rooted it and unlocked. But now Sprint handsfree activation starts randomly and I don't now how to remove it...
Click to expand...
Click to collapse
do i use this if im already on zv9
robertlee1989 said:
do i use this if im already on zv9
Click to expand...
Click to collapse
If you want root then yeah why not? You can still use this even if you're on ZV9.
robertlee1989 said:
do i use this if im already on zv9
Click to expand...
Click to collapse
I have the same problem.did you figure it out?
WARNING I AM NOT RESPONSIBLE FOR WHAT YOU DO TO YOUR DEVICE
MESSING WITH NV ITEMS CAN CAUSE SERIOUS DAMAGE TO YOUR HANDSET
USING THIS TOOL/INFO TO BREAK THE LAW IS NOT CONDONED
USING THIS TO VIOLATE YOUR CARRIERS TERMS IS NOT CONDONED
I WILL NOT HELP WITH WRITING ANYTHING TO YOUR DEVICE OTHER THEN A PRL
I DO NOT PROVIDE ANY LINKS TO THE PRL OR TOOLS USED. USE GOOGLE SEARCH BOLD ITEMS + XDA BELOW!
1. LG Drivers installed, Diag drivers specifically
2. MSL for your phone
3. QPST installed ( 2.7 or newer preferred )
4. SPRINT/VZW PRL file of your choice ( Sprint is on 54xxx) Universal sprint VZW is 00001 00002 etc, be careful as those can piss off your carrier!
Step 1 - Install your LG drivers and acquire your MSL from sprint.
Step 2 - Google and install QPST.
Step 3 - Find what PRL you want to use and put it in a folder on your computer.
Step 4 - Turn off USB debugging on your phone...go to settings > applications > development > uncheck USB debugging
Step 5 - Open the dialer on your phone and enter ##3424# Turn Diag ON
Step 6 - Connect your phone to the computer and select Charging only if prompted.
Step 7 - Open QPST Configuration wherever you installed it.
Step 8 - Click on "Add new port"
Step 9 - UN-Check "Select Serial and USB/Diagnostic Ports Only"
Step 10 - Select your phone on the list and hit OK.
Step 11 - Select your phone on the list.
Step 12 - Click on the "Start Clients" tab at the top and select "Service Programming"
Step 13 - Select your phone on the list and hit OK
Step 14 - Click on "Read from Phone' in the bottom left
Step 15 - Enter your MSL when prompted and hit OK
Step 16 - Click on the "Roam" tab then click "Browse" and navigate to your PRL file. After selecting your PRL click "Write to Phone".
Step 17 - Your phone will reboot at this point and you will see a couple popups on your computer that you can just hit OK to close. Let your phone reboot and don't close QPST until it is finished writing to your phone.
Step 18 - The PRL should be written to your phone now. You can verify it by going to settings > General > About Phone > Status
Once back on sprint prl, you should be able to UPDATE prl and get it to update to the one for your act/area!
Pleas feel free to post results or if you had to do something different!
This is also another option, but i haven't found a way to get it to locate a prl and write it.
maybe some oter people can figure out how to get this to work from the handset?
Ive tried running in production mode, in dev mode, made changes from user to debug and dev in the build.prop
but its still a blank screen when you try it.
using quick setting app you can search ( SPRO ) and click the 1st entry. This isn't for new users so stay outta this stuff lol!
the full entry is com.lge.lgdmsclient.ui.test.SPROmadmHiddenMenuForSprint
in a nutshell it would be exploiting a prl write test to get it to actually write a dif. prl
Verified that Cmda Workshop Trail will write the prl also, it wasn't mentioned in op due to it is NOT FREE, and will require a purchase after 30 days.
You sir are a boss
verizon users are stuck as usual
As we all know, MiA1 has a Snapdragon 625 processor that comes with the X9 LTE modem which supports Carrier Aggregation (2CA) but the OEM has not enabled it.
With the help of this guide you can enable carrier aggregation in your mia1 even without unlocked bootloader and root access.
Tools Required
1. Minimal ADB Drivers
2. QPST Flash Tools
3. QxDM Professional
4. LTE Band Calculator for Android
Steps to Follow
1. Install Minimal ADB Drivers, QPST Flash Tool & QXDM Professional on your PC.
2. Enable USB Debugging on your MiA1 .
3. Go to Phone dialer and dial " *#*#717717#*#* " to enable Diagnostic Mode(See Update Section below before Proceeding).
4. Connect your phone to PC via USB Cable then your PC will detect the device and automatically install the drivers.
5. Open Device Manager on PC and look for Ports(COM & LPT), under this you will see your device listed as "Qualcomm HS USB Diagnostics 9091 (COM*)".
6. Now, Run QPST as an administrator then goto Ports tab and check if your device is listed there and it's state is enabled.
7. Run QXDM as an administrator then goto Options tab and click on Communications. Now a new window will open, in that select your device COM Port under "Target Port" and make sure that your device is selected under "PortType", then click OK.
8. Select "NV Browser" from drop-down menu under View and select "RF LTE" under Category Filter.Now scroll and find something like "RFNV LTE B* CA BC CONFIG"("*" denotes the band).
9. As MiA1 only supports 2CA. we can CA using only two bands
For Ex: B1+B3, B3+B5, B3+B40, B5+B40, B5+B5, B40+B40 etc..
You can select any two band combination that is supported by your carrier and is available in you region.
10. Now Open LTE band Calculator on your phone and select two bands (e.g. B3+B40). you will see a value like "549755813892" or something else(it depends on your bands selection).
11. In QXDM select "RFNV LTE B3 CA BC CONFIG", click on "Read" then double-click on Input and clear the default value "0" and type the value that we have calculated using LTE Band Calculator in step 10 above, then click on "Write". Now,do the same with "RFNV LTE B40 CA BC CONFIG".
12. Wait for few seconds and then disconnect the phone from PC.
13. Now,Restart your phone and turn on data you will see 4g+ icon in status bar. That's it.
Things to Remember
* In step 10 choose bands that are available in your region and make sure, that your carrier supports CA over that bands.
* In step 11, change the value of bands selected in step 10.
* You have to try and test multiple combinations to get the stable CA state because in some bands network is unstable.
* If you lose signal after this process or if you want to revert back then just repeat step 11 and put default input value which is "0" for MiA1.
To check whether CA is working or not
1. Open Phone Dialer and dial "*#*#4636#*#*" to enter in Testing menu.
2. Tap on Phone Information and check "LTE physical channel configuration".
If CA is working, It will show you two connections Primary and Secondary along with their bandwidth, otherwise nothing.
I have configured intra-band CA over band 40 on Jio4G.
You can look at the screenshots attached below for difference with or without CA.
Update
USSD code is now working on latest June 2019 Security Patch.
USSD code is not working on March/April/May 2019 security patch.
If the USSD code doesn't work then you have to root your device first to enable diagnostic mode and after that, you can proceed further from step 5.
There are two ways to enable diagnostic mode after root which are as follows:
1. ADB
Enable "USB Debugging"on your phone.
Connect it to your PC/Laptop.
Open "Minimal ADB & Fastboot" Command Prompt with administrative rights.
Type adb devices and press enter.
Type adb shell and press enter.
Type su and press enter.
Type setprop sys.usb.config diag,adb and press enter.
2. Terminal Emulator App
Install any "Terminal Emulator" app from play store e.g. Termux
Enable "USB Debugging"on your phone.
Connect it to your PC/Laptop.
Open "Termux" .
Type su and press enter.
Type setprop sys.usb.config diag,adb and press enter.
anshsharma240 said:
As we all know, MiA1 has a Snapdragon 625 processor that comes with the X9 LTE modem which supports Carrier Aggregation (2CA) but the OEM has not enabled it.
With the help of this guide you can enable career aggregation in your mia1 even without unlocked bootloader and root access.
Tools Required
1. Minimal ADB Drivers
2. QPST Flash Tools
3. QxDM Professional
4. LTE Band Calculator for Android
Steps to Follow
1. Install Minimal ADB Drivers, QPST Flash Tool & QXDM Professional on your PC.
2. Enable USB Debugging on your MiA1 .
3. Go to Phone dialer and dial " *#*#717717#*#* " to enter Diagnostic Mode.
4. Connect your phone to PC via USB Cable then your PC will detect the device and automatically install the drivers.
5. Open Device Manager on PC and look for Ports(COM & LPT), under this you will see your device listed as "Qualcomm HS USB Diagnostics 9091 (COM*)".
6. Now, Run QPST as an administrator then goto Ports tab and check if your device is listed there and it's state is enabled.
7. Run QXDM as an administrator then goto Options tab and click on Communications. Now a new window will open, in that select your device COM Port under "Target Port" and make sure that your device is selected under "PortType", then click OK.
8. Select "NV Browser" from drop-down menu under View and select "RF LTE" under Category Filter.Now scroll and find something like "RFNV LTE B* CA BC CONFIG"("*" denotes the band).
9. As MiA1 only supports 2CA. we can CA using only two bands
For Ex: B3+B5,B3+B40,B5+B40 etc..
You can select any two band combination that is supported by your carrier and is available in you region.
10. Now Open LTE band Calculator on your phone and select two bands (e.g. B3+B40). you will see a value like "549755813892" or something else(it depends on your bands selection).
11. In QXDM select "RFNV LTE B3 CA BC CONFIG", click on "Read" then double-click on Input and clear the default value "0" and type the value that we have calculated using LTE Band Calculator in step 10 above, then click on "Write". Now,do the same with "RFNV LTE B40 CA BC CONFIG".
12. Wait for few seconds and then disconnect the phone from PC.
13. Now,Restart your phone and turn on data you will see 4g+ icon in status bar. That's it.
Things to Remember
* In step 10 choose bands that are available in your region and make sure, that your carrier supports CA over that bands.
* In step 11, change the value of bands selected in step 10.
* You have to try and test multiple combinations to get the stable CA state because in some bands network is unstable.
* If you lose signal after this process or if you want to revert back then just repeat step 11 and put default input value which is "0" for our MiA1.
Click to expand...
Click to collapse
Bro already a thread is there and a tutorial too....
If someone has a doubt then refer following tutorial...
@anshsharma240 what bands are used in india? For Jio, Airtel, Vodafone? Which career supports CA in india?
.:Addicted:. said:
@anshsharma240 what bands are used in india? For Jio, Airtel, Vodafone? Which career supports CA in india?
Click to expand...
Click to collapse
Right now, Only Jio and Airtel supports LTE Advanced through carrier aggregation.
Jio: band 3, 5 & 40
Airtel : band 3 & 40
Shobit Joura said:
Bro already a thread is there and a tutorial too....
If someone has a doubt then refer following tutorial...
Click to expand...
Click to collapse
Bro, apart from youtube link that thread doesn't contain any details and your tutorial is also in hindi.
anshsharma240 said:
Bro, apart from youtube link that thread doesn't contain any details and your tutorial is also in hindi.
Click to expand...
Click to collapse
Yeah the thread was here...detailed...
ENABLE 4g+/LTE+ in any device!, NO ROOT!,with PROOF!,DETAILED TUTORIAL! http://in.c.mi.com/thread-1729961-1-0.html
I think link was given there.....and its there..so i font thought of rewritting it and just pasted the link of this thread there ....
Shobit Joura said:
Yeah the thread was here...detailed...
ENABLE 4g+/LTE+ in any device!, NO ROOT!,with PROOF!,DETAILED TUTORIAL! http://in.c.mi.com/thread-1729961-1-0.html
I think link was given there.....and its there..so i font thought of rewritting it and just pasted the link of this thread there ....
Click to expand...
Click to collapse
It's mi forum link and it's not there in your xda thread.
anshsharma240 said:
It's mi forum link and it's not there in your xda thread.
Click to expand...
Click to collapse
There is a xda thread link , but never mind u did good , by writing it all here.?
Is there any method to testing or any confirmation that it really working except lte+ on status bar?
A speed test will tell you if working or not.
tanapak1 said:
Is there any method to testing or any confirmation that it really working except lte+ on status bar?
Click to expand...
Click to collapse
Yes, you can check whether CA is working or not.
1. Open Phone Dialer and dial "*#*#4636#*#*" to enter in Testing menu.
2. Tap on Phone Information and check "LTE physical channel configuration".
If CA is working, It will show you two connections Primary and Secondary along with their bandwidth, otherwise nothing.
You can look at the screenshots attached below for difference with or without CA.
I have configured intra-band CA over band 40 on Jio4G.
anshsharma240 said:
Yes, you can check whether CA is working or not.
1. Open Phone Dialer and dial "*#*#4636#*#*" to enter in Testing menu.
2. Tap on Phone Information and check "LTE physical channel configuration".
If CA is working, It will show you two connections Primary and Secondary along with their bandwidth, otherwise nothing.
You can look at the screenshots attached below for difference with or without CA.
I have configured intra-band CA over band 40 on Jio4G.
Click to expand...
Click to collapse
Does it works for inter band CA ? Like b5+b3 for jio and b3+b40 for Airtel. I tried through QXDM but not working for inter band CA . Only band 40-40 intraband CA is working. Can someone confirm this?
TIA
Vishal21896 said:
Does it works for inter band CA ? Like b5+b3 for jio and b3+b40 for Airtel. I tried through QXDM but not working for inter band CA . Only band 40-40 intraband CA is working. Can someone confirm this?
TIA
Click to expand...
Click to collapse
It works on both intra-band and inter-band CA.
anshsharma240 said:
It works on both intra-band and inter-band CA.
Click to expand...
Click to collapse
If so can you kindly post screenshot of network signal guru with interband CA?
TIA
Vishal21896 said:
If so can you kindly post screenshot of network signal guru with interband CA?
TIA
Click to expand...
Click to collapse
i can't because network signal guru requires root
*Solved*
Thanks for good guide. is there any root way to this process easier?
I am using Airtel, I want to enable 4G+ but my bootloader is locked. So, can I do this? After doing this, will I face any problems in OTA because of new firmware and modem with upcoming updates and any random reboots will happen?
shmp30 said:
Thanks for good guide. is there any root way to this process easier?
Click to expand...
Click to collapse
You don't need root access if you can enable diagnostic mode via USSD code
birarvindersingh said:
I am using Airtel, I want to enable 4G+ but my bootloader is locked. So, can I do this? After doing this, will I face any problems in OTA because of new firmware and modem with upcoming updates and any random reboots will happen?
Click to expand...
Click to collapse
Yes, you can do this even with locked bootloader. And you will not face any random reboot or OTA issues.
DESCRIPTION
Realme Like Few Other Companies Have Dishonest Rules For Unlocking The Bootloader In Different Regions(EU). Unlocking Bootloader On The EU Variants Is Not Allowed By Realme. But I Have Found A Way To Remove The Restriction And Pave The Way For Further Development.
This Will Not Unlock Your Bootloader But It Will Convert Your Device To Global Variant (EX) There By Allowing You To Apply For Bootloader Unlock. Tested On Realme 5 (EU) Variant
NOTES
I'm Not Responsible For Anything Whatsoever. If This Guide Leads You To A Bricked Device I'll Simply Laugh At You.
STEPS (FOLLOW VERY CAREFULLY)
1. Download the Oppo_Free_Unlock_v1.0.zip file from this link
2. Enable Developer Options, USB Debugging & Make Sure Device Is Detected
3. Now Connect Your Device To The Computer Using A Micro USB Cable
3. Open Control Panel - Device Manager and expand the Network Adapters category.
4. Disable all your ethernet adapters except the wifi adapter .
5. Click on the action tab, then choose add legacy hardware
7. Choose install the hardware that I manually select from a list (Advanced) and click next.
8. Click network adapters, then click next.
9. Select Microsoft and choose Microsoft KM-TEST Loopback Adapter, then click next.
10. Click next, then click finish.
11. In the device manager,browse the Network adapters and double click on Microsoft KM-TEST Loopback Adapter to open its properties.
12. Go to the Advanced tab and find the Network Address option
13. Click the blank chackbox and paste 704D7B61ABCD in the text box .
14. Close the properties window and close Device Manager.
15. Go to where you extracted the unlock tools. Open Sec5.exe.
16. Make sure your device is in MTP mode, and then press the Unlock button.
17. After about a second, a string of numbers and letters should show up in the left pane. A few seconds later, "OK" should start flashing in the right pane. Press "Stop unlocking" and close the window.
18. Open the phone app on your device and dial *#3954391#. Then dial *#391#. A screen should come up with a whole bunch of regions listed. Take a look which region is marked in green, this is your current region .Write it so that you can go back if you want .
19. Now you can choose any region you want, I tested two, "IN INDIA" AND "MULTILINGUAL VERSION EX"
20. Your phone should now reboot. Once it's rebooted, your region will have changed .
Every time you changed region and want to change it again you need to use the software.
CREDITS
@or965 (For The Orginal Trick)
@Hanif380 (For Testing)
Followed this guide and finally managed to get the android 10 update. For some reason my region was stuck on Android 9.
Thanks.
mizdrake7 said:
DESCRIPTION
Realme Like Few Other Companies Have Dishonest Rules For Unlocking The Bootloader In Different Regions(EU). Unlocking Bootloader On The EU Variants Is Not Allowed By Realme. But I Have Found A Way To Remove The Restriction And Pave The Way For Further Development.
This Will Not Unlock Your Bootloader But It Will Convert Your Device To Global Variant (EX) There By Allowing You To Apply For Bootloader Unlock. Tested On Realme 5 (EU) Variant
NOTES
I'm Not Responsible For Anything Whatsoever. If This Guide Leads You To A Bricked Device I'll Simply Laugh At You.
STEPS (FOLLOW VERY CAREFULLY)
1. Download the Oppo_Free_Unlock_v1.0.zip file from this link
2. Enable Developer Options, USB Debugging & Make Sure Device Is Detected
3. Now Connect Your Device To The Computer Using A Micro USB Cable
3. Open Control Panel - Device Manager and expand the Network Adapters category.
4. Disable all your ethernet adapters except the wifi adapter .
5. Click on the action tab, then choose add legacy hardware
7. Choose install the hardware that I manually select from a list (Advanced) and click next.
8. Click network adapters, then click next.
9. Select Microsoft and choose Microsoft KM-TEST Loopback Adapter, then click next.
10. Click next, then click finish.
11. In the device manager,browse the Network adapters and double click on Microsoft KM-TEST Loopback Adapter to open its properties.
12. Go to the Advanced tab and find the Network Address option
13. Click the blank chackbox and paste 704D7B61ABCD in the text box .
14. Close the properties window and close Device Manager.
15. Go to where you extracted the unlock tools. Open Sec5.exe.
16. Make sure your device is in MTP mode, and then press the Unlock button.
17. After about a second, a string of numbers and letters should show up in the left pane. A few seconds later, "OK" should start flashing in the right pane. Press "Stop unlocking" and close the window.
18. Open the phone app on your device and dial *#3954391#. Then dial *#391#. A screen should come up with a whole bunch of regions listed. Take a look which region is marked in green, this is your current region .Write it so that you can go back if you want .
19. Now you can choose any region you want, I tested two, "IN INDIA" AND "MULTILINGUAL VERSION EX"
20. Your phone should now reboot. Once it's rebooted, your region will have changed .
Every time you changed region and want to change it again you need to use the software.
CREDITS
@or965 (For The Orginal Trick)
@Hanif380 (For Testing)
Click to expand...
Click to collapse
I follow every step but i don t receive ok from Sec5
What is this?
This is a guide on how to enable all LTE and 5G bands on the US or Canadian S22 series phones by going through the service menu. This guide is mostly based on this S20U guide by mellojosh, but has been adapted for the S22U phone with more information added.
Which bands can be enabled this way?
All bands the phone supports in hardware can be enabled through the service menu. For the S22 Ultra, that includes all Sub-6 bands like n78, and mmWave bands, as well as 5G SA bands, as shown in this screenshot below.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Which phones does this method support?
This method has been confirmed to work on:
Samsung S22 Ultra (S908U, S908U1, S908W).
Galaxy Z Fold 4. Thanks @Abaddon.
This method works on both Android 12 (One UI 4.1) or Android 13 (One UI 5.0 beta).
This method requires your device be on the US firmware (XAA or other US CSC), so as long as you can Odin flash XAA firmware on your device (such as Canadian variant), you should be able to do this.
If you get this method working on your phone that isn't in the known list, post it here and I will add it to the list above.
How To Guide
You will need a Windows computer (or VM) and the Samsung USB Driver installed to do the following steps. Install the USB driver from here before proceeding if you do not have it installed.
A. Flash US Firmware
First, your device must be on US firmware (XAA or other CSC). You can skip this step and go to B if your device is already on US firmware.
If you're not on a US firmware because you have another Snapdragon variant (like Canadian), follow the steps below to flash XAA firmware. Note this will WIPE and FACTORY RESET your device. ALL DATA WILL BE LOST. So backup if you need to.
Download Odin 3.14.4 or latest version.
Download US XAA U1 firmware for your device from SamMobile.com or SamFw.com. For example, for the S22 Ultra, download the XAA firmware for S908U1. Extract the contents of the firmware to somewhere on your computer. You should have 5 files (BL, AP, CP, CSC, HOME_CSC). We won't use HOME_CSC.
Restart your phone and go into download mode. On the S22 Ultra, hold all three power and up + down volume at the same time until the phone starts, then press the up volume key to get into download mode.
Open Odin and connect your phone to your computer with a USB. Odin should say your phone was added.
Click each of the BL, AP, CP, CSC buttons and select the corresponding files from the firmware zip you extracted. For CSC, use the file that starts with CSC and not HOME_CSC (we won't be using HOME_CSC). Do not load anything into USERDATA.
Click start and let it flash the firmware (see the picture below). If it flashed correctly, your phone will be on XAA firmware after it restarts and you will have to set it up again from scratch.
Set up your phone and verify it is on XAA firmware by going to Settings -> About Phone -> Software information -> check that it says XAA/XAA,XAA/OOO under "Software provider software version". OOO here will be your phone's original CSC like XAC which you cannot change and do not need to.
B. Unlock Service Menu Secret Codes
The next step is we need to unlock access to the service menu. Usually this is locked by default, but it might already be unlocked for you.
First check if you can access the service menu by trying each of these ways:
Open dialer and enter *#27663368378# to try to get directly into the service mode main menu. The menu should open after you press the last # character, you shouldn't have to press call.
Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
If either of the above ways works for you to get to the service mode main menu, then you can skip the below steps to unlock the menu and go directly to instructions C.
If you cannot access the menu with the above codes, then follow these instructions to unlock the secret codes.
Enable USB Debugging in Developer menu.
Download SamFW FRP tool 3.1 or latest version from here.
Open SamFW FRP tool and connect your phone to the computer with a USB.
Using SamFW FRP tool, go to MTP tab and click on "Enable Secret Code for Verizon". See the picture below. Note it works on any US CSC even though it says "for Verizon".
If in the program output you see it's getting stuck on "Waiting for DIAG", then dial *#0808# on your phone to open USB settings and select "DM + MODEM + ADB" then press OK. The program should then complete the step and then get stuck on "Disabling DIAG". When it does, using the *#0808# menu again, select "MTP + ADB" this time and press OK. Now the program should complete the step and say that secret codes was unlocked.
Now you should be able to use *#73# for RF test, *#27663368378#* to go directly to service menu. Test it to make sure the codes work and the service menu is opening.
C. METHOD 1: Use the Service Menu to Unlock All Bands
Enter the service menu using either way.
Open dialer and enter *#27663368378# to get directly into the service mode main menu.
Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
Use the service mode to set the following options. Note you can go back between screens with three dots -> back for quicker navigation, but I am just starting each option below from the main menu so it's easy to read.
Enable all LTE and 5G bands.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> SYSTEM -> Next page 4 times -> SET LTE BAND CONFIG -> SET DEFAULT LTE BAND.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G PRUNE STATUS -> REMOVE NR5G PRUNE.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> GCF -> REMOVE ONLY NR WHITELIST.
Optional if you need to enable mmWave bands: Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> Sub6/mmWave -> ALL ENABLE.
Optional if you have issues going from LTE to LTE+ (carrier aggregation not working properly): Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page -> DISABLE CA COMBO CHECK -> DISABLE ON.
Enable 5G NR features (DSS & CDRX) if needed. These options might already be enabled for you by default.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page -> NR CDRX CONTROL -> NR CDRX ENABLE. NR CDRX is 5G power saving mode.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> AS -> Next Page 2 times -> NR DSS CONTROL -> NR DSS ENABLE. NR DSS is 5G Dynamic Spectrum Sharing.
Enable 5G SA if you're lucky enough to have a carrier with standalone 5G networks. This option might be enabled by default already.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> SA/NSA ENABLE.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G SA/NSA Mode Control -> Remove SA permit list.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> Next Page -> NR5G NRDC -> NRDC ENABLE. NRDC is for dual connectivity with Sub6 + mmWave bands in parallel. Only applies to 5G SA networks and only if your carrier uses it.
Restart your phone, then dial *#73# to get into RF Test Mode. Click Band Selection -> Sim 1 or Sim 2 (whichever you use). On this screen if you scroll down, you'll see a list of enabled NR5G bands. Make sure all bands are enabled. See my picture below.
NOTE: Band selection won't be reset with a reboot, but might be reset after a CSC update (or a software update that includes a CSC update). You will have to re-do the service menu settings every update or re-flash of a CSC.
NOTE: If you use an eSIM or a dual-SIM phone with a 2nd SIM, you need to change the NR5G stack before changing the NR5G related options above. Change the NR5G stack to Stack 2 with the following setting first.
Service Mode Main Menu -> UE SETTING & INFO -> SETTING -> PROTOCOL -> NR5G -> NR5G STACK SELECTION -> Select STACK 2.
OPTIONAL: Now that all bands are enabled and usable, you can use the Band Selection menu under *#73# to selectively disable certain bands if you need to. This is not covered here but that menu is self-explanatory.
If this method isn't working, try METHOD 2 below. You do not need to try METHOD 2 if this method ended up working for you.
D. METHOD 2: Unlock all bands via Protocol Simulation menu.
If METHOD 1 above didn't work or not all bands were unlocked, you can try to unlock all bands by simulating a change in your CSC to GCF (Global Certification Forum). This won't actually change your CSC to GCF, but will change the options in the service menu as if you were on GCF CSC, which should give you access to all SA and NSA bands. Credits to @wr3cckl3ss1 for figuring out this method.
To do this method, first enter the service mode main menu using either of the following ways.
Open dialer and enter *#27663368378# to get directly into the service mode main menu.
Open dialer and enter *#73# to get into RF Test mode. Press Band Selection. Press three dots on top right -> Back. Repeat three dots -> back three more times until you get to the service mode main menu.
Using the service menu, change the following options
Go to: Service Mode Main Menu -> PROTOCOL STATE -> PROTOCOL SIMULATION -> IMEI PRE CFG SIMULATION.
In this menu, click [1] AP, then click GCF (last option). Then click [2] NET1 and change it to GCF as well. Do the same for [3] NET2. All GCF.
Press [4] Write. Then restart phone.
Check if all SA bands were unlocked. If not, repeat the band unlocking instructions from METHOD 1 above and then restart the phone and check again.
Enjoy your unlocked LTE and 5G bands!
FYI, I have personally tested this on a Canadian S908W on XAA firmware to enable 5G in Canada. In fact, I was even able to update to One UI 5.0 using the adb sideload method since I was on XAA firmware, and then I repeated the steps above to enable all 5G bands on the beta (service menu was still unlocked). So now I have 5G on One UI 5.0 beta in Canada! The trifecta!
CREDITS
@mellojosh for his guide on service menu band options on the S20U1.
@wr3cckl3ss1 for his guide on selecting bands from the dialer for the S22 series phones, and for instructions on protocol simulation.
@bigdave79 for reminding me about needing the Samsung USB Driver for this to work.
Excellent job sir.
i'm on android 13 beta2 on unlocked s22 ultra.
after i click on "DM + MODEM + ADB" then ok,
it' still stuck at Waiting for DIAG....
Great effort man, Thank you.
but this will not work on variants like S908N Korea or the S9080 China correct ?
netnerd said:
i'm on android 13 beta2 on unlocked s22 ultra.
after i click on "DM + MODEM + ADB" then ok,
it' still stuck at Waiting for DIAG....
Click to expand...
Click to collapse
Which CSC are you using and which model (S908U1)?
When I tested this, I unlocked the secret codes first on Android 12, then upgraded to Android 13 and secret codes still worked. I'm not sure if you can unlock it directly on Android 13.
Are you willing to downgrade to Android 12 first to try?
Mem_0 said:
Great effort man, Thank you.
but this will not work on variants like S908N Korea or the S9080 China correct ?
Click to expand...
Click to collapse
Can you flash US firmware on the Korean and Chinese variants with Odin (normal or patched)? If you can get on US firmware, then it might work. I do not think it will work on other firmwares.
peacey8 said:
Can you flash US firmware on the Korean and Chinese variants with Odin (normal or patched)? If you can get on US firmware, then it might work. I do not think it will work on other firmwares.
Click to expand...
Click to collapse
I don't think that's possible as the pit files are different.
peacey8 said:
Can you flash US firmware on the Korean and Chinese variants with Odin (normal or patched)? If you can get on US firmware, then it might work. I do not think it will work on other firmwares.
Click to expand...
Click to collapse
till now there is no way to flash US on a Korean
Mem_0 said:
till now there is no way to flash US on a Korean
Click to expand...
Click to collapse
peacey8 said:
Can you flash US firmware on the Korean and Chinese variants with Odin (normal or patched)? If you can get on US firmware, then it might work. I do not think it will work on other firmwares.
Click to expand...
Click to collapse
The only Snapdragon variant that has the same pit file as S908U/S908U1....is the S908N. But to no avail. It fails.
wr3cckl3ss1 said:
The only Snapdragon variant that has the same pit file as S908U/S908U1....is the S908N. But to no avail. It fails.
Click to expand...
Click to collapse
why does it fail ? bec of different pit files ?
The pit files are what partition the device. And....
S908U/S908U1/S908N have B0Q_USA_SINGLEW
S908E - B0Q_GBL_OPEXX
S908W- B0Q_CAN_SINGLEX
And even if you were to get it to flash. That still won't unlock the bootloader. Just an FYI.
I have made a lot of research and failure tries trying to change the CSC of the S908N I have from KTC to KOO, but every time it fails using Samkey or even Samfw, after further looking they said that Samsung had blocked the Korean variants starting from S21 I guess.
wr3cckl3ss1 said:
The pit files are what partition the device. And....
S908U/S908U1/S908N have B0Q_USA_SINGLEW
S908E - B0Q_GBL_OPEXX
S908W- B0Q_CAN_SINGLEX
And even if you were to get it to flash. That still won't unlock the bootloader. Just an FYI.
Click to expand...
Click to collapse
I don't want to unlock the bootloader at the moment, I just want to change csc at first to KOO instead of KTC and after that maybe install international software.
peacey8 said:
Which CSC are you using and which model (S908U1)?
When I tested this, I unlocked the secret codes first on Android 12, then upgraded to Android 13 and secret codes still worked. I'm not sure if you can unlock it directly on Android 13.
Are you willing to downgrade to Android 12 first to try?
Click to expand...
Click to collapse
yes, I'm on s908U1 with FKR/FKR, TMB/XAA (Visible wireless on sim, tmobile on esim).
if i downgrade to Android 12, will it wipe my data? i really don't wanna wipe my phone
netnerd said:
yes, I'm on s908U1 with FKR/FKR, TMB/XAA (Visible wireless on sim, tmobile on esim).
if i downgrade to Android 12, will it wipe my data? i really don't wanna wipe my phone
Click to expand...
Click to collapse
Yes it might wipe your phone, I'm not sure. I wouldn't risk it without backing up first.
I haven't tested this on FKR. So if it doesn't work for you on Android 12, use SamFW FRP Tool to change your CSC to XAA when you're on Android 12. Then it should definitely work.
Thanks for this.
Question: if I'm on att or TMOB, does this unlock more useable bands for me?
netnerd said:
i'm on android 13 beta2 on unlocked s22 ultra.
after i click on "DM + MODEM + ADB" then ok,
it' still stuck at Waiting for DIAG....
Click to expand...
Click to collapse
I'm having the same issue and I'm on Android 12.
EDIT: I'm an idiot. I did not have the Samsung Android USB drivers installed. Tried it again and now it works!
ekerbuddyeker said:
Thanks for this.
Question: if I'm on att or TMOB, does this unlock more useable bands for me?
Click to expand...
Click to collapse
The phone already comes with all almost all the bands already. This guide just shows you how to enable them all.
Has anyone had any luck, I followed all the step to the T, but it still stuck on "waiting for DIA".
Running androind 12 / SM-S908U1
canada S22U
formula666 said:
Has anyone had any luck, I followed all the step to the T, but it still stuck on "waiting for DIA".
Click to expand...
Click to collapse
Install Samsung Android USB drivers from here.