Help crack WCDMA and FDD-LTE please!!! - ONE Q&A, Help & Troubleshooting

Due to China MIIT's policy, WCDMA and Fdd-lte are blocked in China version. The oneplus offers a crack file, but it only supports color os. And if you clean flash the whole color os or custom rom or cm11s, the crack will be useless.
The follwing is how they block WCDMA and FDD: once the phone detects non-CMCC sim, aka China-Unicom Sim,the phone will automatically build a folder which named policyman in the efs partition. The folder includes two file:carrier_policy.xml and rat_mask. The former controls how to block in different situations,which I can simply change to support WCDMA and fdd. But the latter, I dont know how to open it. Bnd I suppose it controls the mobile network mode after the boot. So after every boot, my phone will be 2g, which lasts 15 seconds, and then be 3g/4g.
So if you're able to open rat_mask or crack totally, please offer a way. Really appreciate for your help!
Here is the policyman folder:https://mega.co.nz/#!eZUTUToS!rwmk7xfXw5jXWOH1EYMcZlkrCNA8MrHW7yILvcW7AJI

Related

Qualcomm mdm6600 (GOBI) AT Commands

This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.
That's awesome, man! Hopefully it works when you test it tomorrow. Good luck
jwells777 said:
This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.
Click to expand...
Click to collapse
I am the OP of the thread you referred to, the one about the Qualcomm modem commands. I am very pleased that you were able to use that information to achieve the enabling of other cell radio bands which the modem is capable of but were not available for use. I tried too and was partially successful but not to the point of enabling the recognition of cell service providers which operate on those other bands. I hope that you have succeeded in achieving full operation of the 850 and 1900 MHz UMTS bands which will enable owners of the G2X/P999 phones to connect to networks which use those bands. I am looking forward to your next post.
Core Memory said:
I am the OP of the thread you referred to, the one about the Qualcomm modem commands. I am very pleased that you were able to use that information to achieve the enabling of other cell radio bands which the modem is capable of but were not available for use. I tried too and was partially successful but not to the point of enabling the recognition of cell service providers which operate on those other bands. I hope that you have succeeded in achieving full operation of the 850 and 1900 MHz UMTS bands which will enable owners of the G2X/P999 phones to connect to networks which use those bands. I am looking forward to your next post.
Click to expand...
Click to collapse
If I am understanding correctly, this would allow G2x phones to work with the new T-Mobile LTE 1900 Mhz signal, correct? Or am I way off base?
I believe it's AT&t's networks
jcbofkc said:
If I am understanding correctly, this would allow G2x phones to work with the new T-Mobile LTE 1900 Mhz signal, correct? Or am I way off base?
Click to expand...
Click to collapse
No. The LTE capability is not part of the Qualcomm mdm6600.
http://en.wikipedia.org/wiki/Qualcomm_Gobi
MDM6600™:
Multi-mode modem
HSPA+ with data rates of up to 14.4 Mbit/s
CDMA2000® 1xEV-DO Rev. A/Rev. B support
GPS functionality, including support for Assisted GPS
Since he hasn't posted anything since, it probably didn't succeed. I also sent him a PM which he didn't reply to.
jwells777 said:
This post should really be a reply to the development thread found here:
http://forum.xda-developers.com/showthread.php?t=1412064&page=4
However, due to my lack of post count, I can't post it there.
In any case, I just wanted to say thank you to the OP. Utilizing the information in that thread and a few others, I was able to get my G2X to recognize 850 MHz UTMS providers. Although I haven't yet had a chance to test the data on these bands due to my current provider not having roaming agreements with them, it seems that being able to see the UTMS network may be a step forward.
Hopefully, I will have a chance to test further tomorrow and verify that the 1900 MHz UTMS band is also working properly.
If these tests prove successful, I will post details on how to enable these bands.
Click to expand...
Click to collapse
Unfortunately, as suggested by Core Memory above, I have not been completely successful in this investigation; however, I will post what I discovered along the way for the benefit of others. Perhaps someone else can pickup where I left off and get things working.
First, a summary of the final status:
1) Updated NV Items to enable 850 MHz and 1900 MHz bands
2) Was able to see 850 MHz UMTS providers under the "Search Available Networks"
3) It appeared that a connection was being made to the UMTS provider based upon both the signal strength monitor in "About phone" and the Engineering Mode page that provides data regarding 3g connections
4) In the Engineering Mode page, it seemed that the device was trying to connect (login?) to the network but was not being successful with the login
5) When at the lock screen and forcing the connection to the 850 MHz UMTS network, the "Emergency Only" text appears further suggesting that the connection is working but that my configuration for the network may be wrong.
6) No 1900 MHz providers ever appeared in the network lists while searching. I am not sure whether this is because this band was not functioning or if it was because no such provider existed since I am not terribly familiar with the coverage where I am currently at.
For those who wish to follow this path and test in their own local markets, please see the following steps required to reach this point:
Tools needed:
1) QPST 2.7 (Build 366 or later)
2) QXDM 3.12.714 (or later)
Steps:
1) Install necessary tools on your computer.
2) Enable USB debugging (Settings-->Applications-->Development)
3) Connect phone to PC
4) In the hidden menu (1809#*999#), ensure that Port Setting is configured to CP USB.
5) Launch QPST Configuration
6) Under Ports, select Add New Port.
7) Locate your device and enable the port. (NOTE: There may be two ports available to you here. I believe that you want to use the one that is for Serial / USB/QC connections.
8) From QPST Configuration, launch the "Software Download" tool under the "Start Clients" heading.
9) From here, create a backup QCN file. This backup may or may not enable you to recover from making a mistake later. Also, there is alot of information in this file if you care to navigate through it.
10) Launch QXDM Professional.
11) View-->New-->Common-->NV Browser
12) Options-->Communications-->Target Port (Select your phone)
13) The previous step should have "enabled" the NV Browser lower pane
14) Read and record the following NV Items
a) (441) Band Class Preference (0xFFFF)
b) (946) Expand Band Preference 16 to 32 Bits (0xBFFF)
c) (2954) Bits 32 to 63 of Band Pref (0xFFFFFFFF)
d) (1877) RF Band Configuration (0x0000000002680380)
15) Update item 1877 per discussion below
16) Reboot phone
17) It may be necessary to configure the Modem Setting in the hidden menu to reflect the additional bands.
NV Item configuration discussion:
I am no mobile phone programming expert (< 4 hours playing with them at this level to date); however, as near as I can tell, item 1877 configures the hardware of the modem while items 441, 946, and 2954 appear to be some type of masking bits regarding what bands to prefer. As such, I believe that the original value of item 1877 enables the following RF bands:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:25) WCDMA Band IV (1700)
If you set 1877 to 0x000000006E80380, it should enable the following:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:23) WCDMA Band II (1900)
(Bit:25) WCDMA Band IV (1700)
(Bit:26) WCDMA Band V (850)
If anyone succeeds in getting any further using this information, I would be very curious to hear of your success. Also, please do share with the community such that we can collectively move forward.
Disclaimer: I accept no responsibility for any damage that you may cause to your phone with these tools or procedures. Please note that these tools give you fairly low-level access to your system that enable you to significantly mess things up. Further, please note that modifying the radio bands on this device may void your warranty and/or be in violation of local regulations as set by your local authority (e.g., the FCC).
jwells777 said:
Unfortunately, as suggested by Core Memory above, I have not been completely successful in this investigation; however, I will post what I discovered along the way for the benefit of others. Perhaps someone else can pickup where I left off and get things working.
First, a summary of the final status:
1) Updated NV Items to enable 850 MHz and 1900 MHz bands
2) Was able to see 850 MHz UMTS providers under the "Search Available Networks"
3) It appeared that a connection was being made to the UMTS provider based upon both the signal strength monitor in "About phone" and the Engineering Mode page that provides data regarding 3g connections
4) In the Engineering Mode page, it seemed that the device was trying to connect (login?) to the network but was not being successful with the login
5) When at the lock screen and forcing the connection to the 850 MHz UMTS network, the "Emergency Only" text appears further suggesting that the connection is working but that my configuration for the network may be wrong.
6) No 1900 MHz providers ever appeared in the network lists while searching. I am not sure whether this is because this band was not functioning or if it was because no such provider existed since I am not terribly familiar with the coverage where I am currently at.
For those who wish to follow this path and test in their own local markets, please see the following steps required to reach this point:
Tools needed:
1) QPST 2.7 (Build 366 or later)
2) QXDM 3.12.714 (or later)
Steps:
1) Install necessary tools on your computer.
2) Enable USB debugging (Settings-->Applications-->Development)
3) Connect phone to PC
4) In the hidden menu (1809#*999#), ensure that Port Setting is configured to CP USB.
5) Launch QPST Configuration
6) Under Ports, select Add New Port.
7) Locate your device and enable the port. (NOTE: There may be two ports available to you here. I believe that you want to use the one that is for Serial / USB/QC connections.
8) From QPST Configuration, launch the "Software Download" tool under the "Start Clients" heading.
9) From here, create a backup QCN file. This backup may or may not enable you to recover from making a mistake later. Also, there is alot of information in this file if you care to navigate through it.
10) Launch QXDM Professional.
11) View-->New-->Common-->NV Browser
12) Options-->Communications-->Target Port (Select your phone)
13) The previous step should have "enabled" the NV Browser lower pane
14) Read and record the following NV Items
a) (441) Band Class Preference (0xFFFF)
b) (946) Expand Band Preference 16 to 32 Bits (0xBFFF)
c) (2954) Bits 32 to 63 of Band Pref (0xFFFFFFFF)
d) (1877) RF Band Configuration (0x0000000002680380)
15) Update item 1877 per discussion below
16) Reboot phone
17) It may be necessary to configure the Modem Setting in the hidden menu to reflect the additional bands.
NV Item configuration discussion:
I am no mobile phone programming expert (< 4 hours playing with them at this level to date); however, as near as I can tell, item 1877 configures the hardware of the modem while items 441, 946, and 2954 appear to be some type of masking bits regarding what bands to prefer. As such, I believe that the original value of item 1877 enables the following RF bands:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:25) WCDMA Band IV (1700)
If you set 1877 to 0x000000006E80380, it should enable the following:
(Bit:7) GSM (1800)
(Bit:8) GSM Extended GSM (E-GSM)
(Bit:9) GSM Primary GSM (P-GSM)
(Bit:19) GSM (850)
(Bit:21) GSM (1900)
(Bit:22) WCDMA Band I (2100)
(Bit:23) WCDMA Band II (1900)
(Bit:25) WCDMA Band IV (1700)
(Bit:26) WCDMA Band V (850)
If anyone succeeds in getting any further using this information, I would be very curious to hear of your success. Also, please do share with the community such that we can collectively move forward.
Disclaimer: I accept no responsibility for any damage that you may cause to your phone with these tools or procedures. Please note that these tools give you fairly low-level access to your system that enable you to significantly mess things up. Further, please note that modifying the radio bands on this device may void your warranty and/or be in violation of local regulations as set by your local authority (e.g., the FCC).
Click to expand...
Click to collapse
You've made a lot of progress, your information is very useful. I'll use it for further exploration.
Did you test it with a SIM card with a data plan which uses those bands?
Do you know how to use QPST and/or QXDM flash the phone with a binary file for the baseband?
I did try to connect using sim cards with data plans on the specified frequencies.
As for flashing a baseband, it seems that you should be able to do so with these tools; however, I didn't look into it.
Sent from my LG-P999 using XDA
jwells777 said:
I did try to connect using sim cards with data plans on the specified frequencies.
As for flashing a baseband, it seems that you should be able to do so with these tools; however, I didn't look into it.
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
The following was done while my phone is using the WIND SIM card which is my carrier and is restricted to AWS (WCDMA 1700) and Network Mode is set to WCDMA only.
I used your instructions to enable the UMTS 850 and 1900 MHz bands. One clarification is necessary. The HexaDecimal number 0x6e80380 = Decimal number 115868544 = Binary number 0b110111010000000001110000000.
The binary number is read from right to left with the first binary bit on the extreme right designated as bit 0 of the 27 bit sequence. The binary number is the key to the hexadecimal number used to program the RF Band Configuration in QXDM. For example, according to Jwells777, bit 23 is set to binary 1 to enable WCDMA Band II (band 2) and bit 26 is set to binary 1 to enable WCDMA band V (band 5). Refer to Jwells777 post in this thread which states the binary bits used to set the phone to use the phone's bands. Here's a binary-decimal-hexadecimal converter: http://www.mathsisfun.com/binary-decimal-hexadecimal-converter.html
The HexaDecimal number 0x000000006E80380 can be entered directly for setting "RF Band Configuration" at line 1877 in the NV browser. The HexaDecimal number is converted into the decimal number 115868544 which will appear when another read is performed. In Engineering Mode, the SW Enabled Band reading of my phone changed from 0x0000000102400000 to 0x0000000106C0000. When I changed the phone's setting to Automatic Band Selection, the SW EnableBand reading changed to 0x0000000106e80180. Changing the settings for Band Selection and/or Network Mode will change the SW EnableBand reading on page 5 of Engineering Mode.
In Band Selection, I enabled WCDMA 1900 which caused my connection to WIND's AWS 1700 to drop. I Looked at page 5 (RF Calibration) of Engineering Mode to see which bands were activated and found:
WCDMA1 : 22.37, 22.45, 0.00
WCDMA2 : 0.00, 0.00, 0.00
WCDMA4 : 23.47, 23.19, 0.00
WCDMA5 : 0.00, 0.00, 0.00
WCDMA8 : 0.00, 0.00, 0.00
GSM850 : 32.70, 32.63, 0.00
GSM900 : 32.76, 32.71, 0.00
DCS1800 : 29.40, 29.50, 0.00
PCS1900 : 30.10, 29.90, 0.00
LOSS:
-1.06, -1.18, -1.24
-1.54, -1.64, -1.74
-1.80, -1.79, -2.01
-2.11, -2.21
The same readings occur with Band Selection set to Automatic or manually to any other band except AWS which is the UMTS band the phone was set up to use at the factory.
This indicates that WCDMA2, 5, and 8 are not RF calibrated but DCS 1800 and PCS 1900 are RF calibrated.
I also found that
When I do a network search, it finds WIND and Public Mobile which operate on UMTS 1700 (AWS) and Bell and Telus which operate on UMTS 850 and 1900 but not Rogers which also operates on UMTS 850 and 1900. (Rogers does appear if I search for GSM networks too.)
"In Canada, UMTS coverage is being provided on the 850 MHz and 1900 MHz bands on the Rogers and Bell-Telus networks. Bell and Telus share the network. Recently, new providers Wind Mobile, Mobilicity and Videotron have begun operations in the 1700 MHz band."http://en.wikipedia.org/wiki/Universal_Mobile_Telecommunications_System
That indicates it is able to receive signals on UMTS 850 (Band 5) and 1900 (Band 2) which should enable the phone to see TELUS, Bell and Rogers.
http://en.wikipedia.org/wiki/UMTS_frequency_bands
When I select connection to Bell or TELUS, the phone tries to register but fails with the message: "Unable to connect to this network at this time. Please try again later." That message is generated by the phone's firmware/software, not the network.
I haven't yet tested the phone with a SIM Card for Rogers or Bell or TELUS. A friend has a Rogers SIM card with a data plan but I don't think it will be of any use to test the phone's supposed additionally enabled bands.
Conclusions:
Cognitive overload.
I am finding this quite confusing because of the variable terminology used such as UMTS, WCDMA, PCS, DCS, and the various bands and transmit and receive frequencies used for each protocol. If someone could make more sense out of the information I've provided, that would be very helpful.
Questions:
Engineering Mode Page 5 (RF Calibration) indicate that WCDMA Bands 2,5, and 8 are not RF calibrated but DCS 1800 and PCS 1900 are. Does this mean that the phone will not transmit on the WCDMA Bands 2,5 and 8 because the RF calibration for transmitting is not available?
If anyone can add something useful to this thread, that would be greatly appreciated.
nvm sorry mood pls delete this
Glad to hear that someone else was able to see the other bands using the information that I posted.
I would also add that I am able to see att in the US but not connect. I receive the same error mentioned by CoreMemory. If anyone has access to an O2X and could provide the qcn dump, it may help configure any other NV Items related to the new bands that we have missed.
Sent from my LG-P999 using XDA
HELP
Core Memory said:
You've made a lot of progress, your information is very useful. I'll use it for further exploration.
Did you test it with a SIM card with a data plan which uses those bands?
Do you know how to use QPST and/or QXDM flash the phone with a binary file for the baseband?
Click to expand...
Click to collapse
hi i'm trying but when insert the code 1809#*999# send me a error " MMI CODE CANDELED "
jwells777 said:
Glad to hear that someone else was able to see the other bands using the information that I posted.
I would also add that I am able to see att in the US but not connect. I receive the same error mentioned by CoreMemory. If anyone has access to an O2X and could provide the qcn dump, it may help configure any other NV Items related to the new bands that we have missed.
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
I wonder if the qcn dump from the O2X is useful since it has a different modem, it doesn't have the Qualcomm MDM6600 which is in the G2X/P999.
If we could get a qcn dump from another phone which uses the MDM6600 on the bands we want to get working, that would be a lot of help.
The Qualcomm Mobile Data Modem Software Interface 80-Vr001-2 manual would be very useful too.
Core Memory said:
If anyone can add something useful to this thread, that would be greatly appreciated.
Click to expand...
Click to collapse
i think if you post that into LG Optimus 2x forums with some instructions and explaining them. we could get the configuration from them. Soo you could go and ask them and explain them how to get those codes.
EDIT: NVM i just REAd your last post.
If you guys need a tester for anything, im all ears
Core Memory said:
I wonder if the qcn dump from the O2X is useful since it has a different modem, it doesn't have the Qualcomm MDM6600 which is in the G2X/P999.
If we could get a qcn dump from another phone which uses the MDM6600 on the bands we want to get working, that would be a lot of help.
The Qualcomm Mobile Data Modem Software Interface 80-Vr001-2 manual would be very useful too.
Click to expand...
Click to collapse
I didn't think of the fact that the modems are different. I agree with you that it would probably be more useful to have the dump from a phone with the 6600 that is configured for the new bands
Sent from my LG-P999 using XDA
jwells777 said:
I didn't think of the fact that the modems are different. I agree with you that it would probably be more useful to have the dump from a phone with the 6600 that is configured for the new bands
Sent from my LG-P999 using XDA
Click to expand...
Click to collapse
I don't know of anyone with one. As well, the file contains info which the person who supplies it would have to trust us not to use.
we can ask those guys for the configuration codes it seems they use the same modem or item.
http://forum.xda-developers.com/showthread.php?t=992635#12257150

[Q] z5s 3g modem

I have a ZTE nubia Z5S.
It is great. but 3g is only in 2600 mhz. So only edge for me for now.
Looking around I found some people are trying to unlock the modem and they says the modem supports other bands.
Any idea how to unlock the modem, a new firmware ?
Commands to check the modem?
wait so the z5s gets released in at&t and get a rom? ( I know is a long shot)
Some people is asking roms with the bands released ( someone in miui was working the modem)
Any guide to learn is welcome.
According to http://www.nubia.cn/productdetail.php?id=335, Nubia Z5S supports 3G with the UMTS/WCDMA protocol on the 2100MHz spectrum.
When you say 2600MHz, do you mean LTE or 3G?
Anyway, the WTR1605 tranceiver used on Nubia Z5S has no LTE support, otherwise is capable to handle many UMTS bands, but ZTE might have locked down some. This is the good news.
you are right,
In my country we need:
CLARO
GSM: 850MHz
UMTS/HSDPA: 850Mhz
MOVISTAR (Virgin Mobile)
GSM: 850MHz
UMTS/HSDPA: 850Mhz
TIGO (Uff, UNE y ETB)
GSM: 1900MHz
UMTS/HSDPA: 1900MHz
now ready to learn about unlock bands
anyone has experience with the baseband switcher?
It is possible to use it to change baseband if the z5s is rooted?
Or I need to install cyanagenmod and then use the baseband switcher?
I tried:
to open a terminal:
adb shell
then:
am start -n com.android.settings/.BandMode
I tries to open a window in the cell but the window is empty
I did the command from terminal after su, so the command ran as superuser.
But the same result a window with tittle but no menus.
It looks like that command is for mtk cpus.
Anyone know how to change the bands to automatic snpadragons cpus?
FInally I am getting some place,
I got to the wlan settings, I typed the code *#*#4636#*# inside notepad and copy the code.
Paste in the phone.
I got the menu:
Testing
Phone Information
Battery Information
Usage Statics
Wlan information
I go, WLAN information -> WLAN API
I got the menu:
WLAN settings
disableNetwork
disconnect
enableNetwork
getconfiguredNetworks
getConnectionInfo
Half the menus are not working, but If got to enableNetwork asks:
Input
Enter Network Id:
SO Anyone knows What codes I need to use there?
well, I got the list of the bands supported by the modem using att commands:
AT$QCBANDPREF=?
$QCBANDPREF: (0-1),
"1.BC0_A"
"2.BC0_B"
"3.BC0"
"4.BC1"
"5.BC3"
"6.BC4"
"7.BC5"
"8.GSM_DCS_1800"
"9.GSM_EGSM_900"
"10.GSM_PGSM_900"
"11.BC6"
"12.BC7"
"13.BC8"
"14.BC9"
"15.BC10"
"16.BC11"
"17.BC12"
"18.BC14"
"19.BC15"
"20.BC16
"21.GSM_450"
"22.GSM_480"
"23.GSM_750"
"24.GSM_850"
"25.GSM_RGSM_900"
"26.GSM_PCS_1900"
"27.WCDMA_I_IMT_2000"
"28.WCDMA_II_PCS_1900"
"29.WCDMA_III_1700 "
"30.WCDMA_IV_1700"
"31.WCDMA_V_850"
"32.WCDMA_VI_800 "
"33.WCDMA_VII_2600"
"34.WCDMA_VIII_900"
"35.WCDMA_IX_1700"
"36.WLAN_US_2400 "
"37.WLAN_JAPAN_2400"
"38.WLAN_EUROPE_2400"
"39.WLAN_SPAIN_2400"
"40.WLAN_FRANCE_2400 "
"41.WLAN_US_5000"
"42.WLAN_JAPAN_5000"
"43.WLAN_EUROPE_5000"
"44.WLAN_SPAIN_5000"
"45.WLAN_FRANCE_5000 "
"46.Any"
Any help what this mean?

No service when trying to enable AWS band - G900P

Hi folks,
So I followed the steps in this thread: http://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059/
to attempt to get LTE / AWS service on my G900P that's now on T-mobile. Bands I'm attempting to add are LTE 2/4 and WCDMA IV (AWS)
I've been able to write the NV values successfully (and verified they stuck after rebooting) with several tools - DFS, QXDM and EFS Pro. - so this doesn't seem to be an issue with getting the nv written. (I had KT-SGS5 kernel installed while trying this, as well as trying it on stock.) I'm writing the values via QXDM, EFS Pro and DFS don't seem to be able to write them.
However, as soon as I enable the WCDMA IV band (the only change to the GSM bands) and reboot, the phone is stuck in "No service" mode. Attempting to register on a network (via settings->Network providers gives "An error occurred while searching for networks". Toggling some of the band pref settings does nothing.
Disabling the band again restores service on reboot.
Should note that the only thing I'm doing different from that guide is I left the "band pref" alone for 3G bands. It was defaulted to all ones on my device so I felt it better not to reduce the number of options there.
Anyone else encountered this and able to offer insight? Or should I assume that because this band breaks service it means there's no RF cal data for it and there's no point trying further?
There is a report of someone with a G900P successfully enabling band 4 in the linked thread, so it *should* be possible, broadly speaking.
Should add I'm on rooted OG1. Maybe some additional protection in that update? Unfortunately I had to send in my phone for service and when it came back they'd updated it, so sadly no downgrading and I had to trip the knox bit to get root.

[Completed] Help! Tmobile Samsung S7 locked only on 1800 mhz band. Already rooted

Hi everyone.
Last time i was in xda forums was when i try to mod my windows mobile CE 5.0 lol
This is my sad story:
I bought in the US a samsung s7 with T-Mobile SM-G930T, i paid a guy who 'unlocked' it in there. After that i brought it to Colombia, in here i run the T-mobile unlock app which succeded and erased itself after that. Then the cellphone started working with all the mobile companies in my country except for one that operates over 1800 mhz, other companies do work fine. When i insert a simcard of this company it just says that 'Not registered in network' and wont do nothing. I already tried to put the APN settings correctly (Actually it automatically loaded every company settings detected).
After that i tried to root with a modded Odin with a custom ROM and it succeeded and i got the SuperSU application, tho the cellphone its a little laggy now, but neither that way it worked. Anyone knows how where should i start looking?
I went to this company support and they sent me to Samsung support, which redirected me back to this company, lol
Thanks in advance guys
XDA Visitor said:
Hi everyone.
Last time i was in xda forums was when i try to mod my windows mobile CE 5.0 lol
This is my sad story:
I bought in the US a samsung s7 with T-Mobile SM-G930T, i paid a guy who 'unlocked' it in there. After that i brought it to Colombia, in here i run the T-mobile unlock app which succeded and erased itself after that. Then the cellphone started working with all the mobile companies in my country except for one that operates over 1800 mhz, other companies do work fine. When i insert a simcard of this company it just says that 'Not registered in network' and wont do nothing. I already tried to put the APN settings correctly (Actually it automatically loaded every company settings detected).
After that i tried to root with a modded Odin with a custom ROM and it succeeded and i got the SuperSU application, tho the cellphone its a little laggy now, but neither that way it worked. Anyone knows how where should i start looking?
I went to this company support and they sent me to Samsung support, which redirected me back to this company, lol
Thanks in advance guys
Click to expand...
Click to collapse
Hi,
It seems your phone is region locked due to which you are locked onto a particular mhz network frequency...
yes the first step would be to try to a custom rom to see if this over rides this situation or you could try below situation below... this is ideally for s6.... or atlast google search...
http://forum.xda-developers.com/verizon-galaxy-s6/general/enabling-using-servicemode-t3109579
Ok, since now we have root, many users wanted to know if they can lock onto certain LTE frequency bands using Samsung's ServiceMode. So here is a quick guide.
ServiceMode is Samsung's proprietary Engineering Mode, built within the TouchWiz framework, readily available on International variants, and some domestic like T-Mobile. It allows us to observe the RF connection, change certain RF related settings, and lock our phones onto specific technologies and frequencies. Sadly, Verizon has been blocking user access to Engineering Mode for years now.
So in order to enable access to ServiceMode on Verizon GS6/Edge you'll need to:
- Download Root Explorer
- Navigate to /efs/carrier/HiddenMenu
- Use TextEdit to open it (not text viewer)
- Change the value to ON (upper case), Save and Exit
- Restart the phone
Once restarted you can dial:
*#0011# to observe the connection
If you want to lock your device onto a specific LTE band (13, 4, 2):
*#27663368378#
- UE Settings & Info
- Settings
- Protocol
- NAS
- Network Control
- Band Selection
- LTE Band Selection
Here you can force your phone onto a specific Verizon LTE Band (13, 4, 2), or use LTE ALL if you have VoLTE (Advanced Calling) enabled as this will eliminate the need for CDMA radios.
To go back to default, go through the same process but at Band Selection make sure to chose AUTOMATIC.
There are a lot more settings here, you can enable AMR WB on UMTS if you use T-Mobile so you can get HD Voice on their UMTS layer, etc... Carrier Aggregation has already been enabled, so no need to tweak that.
If you aren't sure what certain settings and values correspond to, it's better to avoid tinkering. You're responsible for your own actions.
According to this thread, he posted via visitor.
Then he registered and posted his query here so he seems to have posted in correct section.
Just documenting this here.
Thread closed!
Regards
Vatsal,
Forum Moderator.

How to:- Enable LTE+ on SD617 based Moto G4 Plus

As we know here https://www.qualcomm.com/products/snapdragon/processors/617 , Moto G4 SOC supports 2CA of different LTE band combinations. We were able to enable band 41, band 20 and band 28 using QXDM until the December update. The DEC update seems to lock the modem to the OEM based LTE bands so the new bands cannot be added on the latest firmware.
Motorola has not provided systemUI support on stock firmware for LTE+.
Requirements:-
1. A PC with Motorola drivers
2. Stock firmware rooted/unrooted Moto G4/plus
3. QXDM software (Search on google it is available everywhere)
4. QPST software (maybe needed to map COM ports)
5. Any custom ROM 8.1 after the above process
Note 1:- Please take a backup of NV (QCN) that contains the IMEI via QPST software. It hardly takes few minutes. So there is no risk of 'baseband unknown' or loss of signals.
Process:-
1. With no SIM cards in any slots and airplane mode ON, boot the phone into BP Tools from bootloader menu.
2. Connect the phone to PC and map the correct Motorola Diag port no xx
3. Open QXDM and go to communication and click to the COM port
4. Select NV browser and enter spc 000000 in the command line
5. Go to RF LTE from the category filter on the right side.
6. Scroll down till item number 70975
7. Read item number 70977 RFNV LTE B3 CA BC CONFIG and write 20 in the field below. ( 20 = 2CA band3 + band5)
8. Move on to 70979 RFNV LTE B5 CA BC CONFIG and write 549755813904 in the field below. ( 549755813904 = 2CA band5 + band 40)
9. Continue to 71014 RFNV LTE B40 CA BC CONFIG and write 549755813892 in the field below. ( 549755813892 = 2CA band40 + band 3)
10. Install QPST and select efs explorer, enter SPC 000000. Go to item_files>modem>lte>common. Delete the file ca_disable and copy new ca_disable after unzipping ca_disable.zip from here. (the original file has CA disable=YES which is deleted in my attached file)
11. Power off the phone, disconnect the cable, insert sim card (JIO) and turn off airplane mode.
12. There is no sign of LTE+ in stock firmware except slight improvement in data speeds.
13. Install custom ROM 8.1 ( I installed AICP athene 8.1 20180310)
I am receiving LTE+ signals whenever the phone latches to band3 and band 5. There is no LTE+ in band 40 in my location currently.
Since the modem firmware and FSG isnt ideally configured for 2CA, we are not able to see secondary carrier signal or sec antenna in Network Signal Guru but I am getting speeds above 85 MBps while latching to the above bands.
Note 2:- I take no responsibility for whatever happens to your device, PC or anything. This guide is for enthusiasts who are willing to take little risk. Do not write 3CA values anything other than the values written above because the SD617 SOC supports 2CA only and not 3CA, not 3+5+40.
Similar threads:-
https://forum.xda-developers.com/lenovo-p2/how-to/enabled-4g-ca-p2-t3707584
https://zukfans.eu/community/threads/enable-carrier-aggregation-lte-a-on-zuk-z2-qualcomm-phone.7388/
In my experience, when I "unlocked" the LTE band 20 on my US XT1644, it was still not in use in that area, dropping back to 3G. I assume that's because the actual RF amplifier head-end is not present, even if the chipset was tricked to "support" it.
SoNic67 said:
In my experience, when I "unlocked" the LTE band 20 on my US XT1644, it was still not in use in that area, dropping back to 3G. I assume that's because the actual RF amplifier head-end is not present, even if the chipset was tricked to "support" it.
Click to expand...
Click to collapse
You can verify band 20 RF capabilities in RFNV LTE B20 CHAN in RF LTE section using qxdm.
For LTE 20 I have re-calculated and changed only the value of:
06828 LTE BC Config LTE_BC_CONFIG_type.lte.config
But after that. it just didn't actually pick up the LTE band 20 (in an area where a native EU GSM phone was), so some hardware piece is missing for the 800MHz frequency in the US version. I assume that's the same for modifying a non-US with US bands too.
Now, about the CA... I am on a Verizon Wireless MVNO, so I blamed that for not having CA (I still get 60-68Mbps DL speeds). The LTE bands for VZW would be 2, 4, 13
In EU I have native SIM (Vodafone) and I get 40-60Mbps too...
Checked right now - the US version (XT1644) doesn't have items with ID higher than 65673. So none of those "LTE CA" appear.
Changing the LTE item that adds bands seems to be still working - the changed value remains after reboot.
QPST identify device as no phone.also command line is greyed out and nothing can be entered.? Any help.!
kidjohny said:
QPST identify device as no phone.also command line is greyed out and nothing can be entered.? Any help.!
Click to expand...
Click to collapse
Identify the com port from the PC Device manager. With QPST configuration opened, select any one com port from the device manager. One like Motorola BP USB com port, Mot qc diag port and Motorola AP com port. The device identity like ESN number should be visible in QPST configuration.
SoNic67 said:
For LTE 20 I have re-calculated and changed only the value of:
06828 LTE BC Config LTE_BC_CONFIG_type.lte.config
But after that. it just didn't actually pick up the LTE band 20 (in an area where a native EU GSM phone was), so some hardware piece is missing for the 800MHz frequency in the US version. I assume that's the same for modifying a non-US with US bands too.
Now, about the CA... I am on a Verizon Wireless MVNO, so I blamed that for not having CA (I still get 60-68Mbps DL speeds). The LTE bands for VZW would be 2, 4, 13
In EU I have native SIM (Vodafone) and I get 40-60Mbps too...
Click to expand...
Click to collapse
Band x CA list is in RF LTE menu not near items 65xxxx or 6828/6829
dr.faramroze said:
Identify the com port from the PC Device manager. With QPST configuration opened, select any one com port from the device manager. One like Motorola BP USB com port, Mot qc diag port and Motorola AP com port. The device identity like ESN number should be visible in QPST configuration.
Click to expand...
Click to collapse
It's OK now..but no RF LTE option..in category field.
dr.faramroze said:
Band x CA list is in RF LTE menu not near items 65xxxx or 6828/6829
Click to expand...
Click to collapse
There is no "RF LTE" category.
Also, that category would not matter at all as long as you have the actual ID number of the NV location (70975 in your example). As I said, the XT1644 that I have doesn't go higher than location number 65673.
Can u specify the diag driver u used.Where can I get that.?
In your screenshot qxdm identify it as msm8926.But in mine it shows 4110.could that be a problem.?
You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
https://drive.google.com/file/d/0Bw01zu5q0Cg-aFFEbFU4ZE85cEU/edit
https://www.4shared.com/zip/YGncBw36ce/QXDMWIN314_Installer-011443.html
https://www.4shared.com/rar/zS1_Gczdei/QXDMWIN31411741U.html#
https://www.4shared.com/rar/irXxwa_Gca/QXDMWIN40001241U.html
https://www.4shared.com/rar/xYg-VTi3ei/QDARTWIN48000393F.html
https://www.4shared.com/rar/QpBdFX9Kei/QPST_27460.html
Install version 594 for unlimited access https://drive.google.com/file/d/0B4ciwAYRi6hXUy1mU19UVlJ5OEU/view
when i try to boot into bp tools, it just boots into android instead
BP Tools mode is diag Com port mode in android OS booting system. It is normal android with serial port.
dr.faramroze said:
You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
https://www.4shared.com/rar/zS1_Gczdei/QXDMWIN31411741U.html#
https://www.4shared.com/rar/irXxwa_Gca/QXDMWIN40001241U.html
https://www.4shared.com/rar/xYg-VTi3ei/QDARTWIN48000393F.html
https://www.4shared.com/rar/QpBdFX9Kei/QPST_27460.html
Click to expand...
Click to collapse
Great. Thanks....its all working fine now.able to get LTE+.But no big difference in speed here in my area..!...also u missed the starting location to find ca_disable file.item_files is under nm(or nvm or nv..something like that.) folder.Have a Gud Day.Appreciate ur work.
dr.faramroze said:
You are using an older version of QXDM that's why there is no RF LTE menu. Please use the following latest tools.
Click to expand...
Click to collapse
The newer download in the first post was corrupted, I will try yours when I get at my PC in a couple of days (I am traveling now).
SoNic67 said:
The newer download in the first post was corrupted, I will try yours when I get at my PC in a couple of days (I am traveling now).
Click to expand...
Click to collapse
There are many versions of QXDM now in my thread above. Make sure you use atleast 594.
For those who want to tinker with additional LTE bands. Here are the stock values of Moto G4/plus.
MOTO G4 PLUS
441= 0xFFFF
946= 0x3FFF
1877= 562950027346304
2954= 4294967295
4548= 562950024724480
6828= 549755814037
6829= item inactive
65633= 0x0000008000000091
Always make a .qcn backup in QPST>software download>backup. Fastboot flash modem nonhlos will also restore original values and loss of signal. Let me know if anyone is able to achieve additional bands like band 41, band 20, band 28 etc. It will be seen by Network Signal Guru.
dr.faramroze said:
For those who want to tinker with additional LTE bands. Here are the stock values of Moto G4/plus.
MOTO G4 PLUS
441= 0xFFFF
946= 0x3FFF
1877= 562950027346304
2954= 4294967295
4548= 562950024724480
6828= 549755814037
6829= item inactive
65633= 0x0000008000000091
Always make a .qcn backup in QPST>software download>backup. Fastboot flash modem nonhlos will also restore original values and loss of signal. Let me know if anyone is able to achieve additional bands like band 41, band 20, band 28 etc. It will be seen by Network Signal Guru.
Click to expand...
Click to collapse
Careful, the LTE bands and numbers are different for different markets! US bands are different from EU and Indian models.
I have tried the new software. On the US version, at those fields, I get "NV Status Error Received: No such file or directory"

Categories

Resources