[WIP] Unlock LTE Bands (TW/CN to WW) - ZenFone 2 General

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Caution: I'm not responsible for any damage that can occur trying my methods in your devices. Just proceed if you're an advanced user and conscious about what I'm doing here. Read this again. And again.
Hello. I've been searching a lot about this and after searching in lots of russian/chinese forums I've found that inside boot.img there is a config_init.sh file that loads phone's configuration depending on the phone's SKUID and many other parameters:
Attempt #1 - Change config_init.sh file
Code:
# software configuration related boot actions
#please sync to RF BAND
FULL_BAND=8
WW_BAND=0
TW_BAND=1
CN_BAND=2
US_BAND=3
TR_BAND=4
TEST_BAND=12
# ZX550ML RF BAND
WW_US_BAND=15
TW_CN_JP_BAND=0
WW_TEST_BAND=1
TW_TEST_BAND=8
# project ID
ZE550ML=23
ZE551ML=31
ZR550ML=28
ZX550ML=27
ZE551ML_CKD=30
RFSKUID_DETECT=$(cat /sys/module/intel_mid_sfi/parameters/rf_sku_id)
PROJID_DETECT=$(cat /sys/module/intel_mid_sfi/parameters/project_id)
COUNTRY_CODE=$(cat /factory/PhoneInfodisk/country_code)
log -p i -t config_init "PROJID: $PROJID_DETECT ,RFSKUID: $RFSKUID_DETECT"
if [ -n "$PROJID_DETECT" ]; then
case $PROJID_DETECT in
"$ZE550ML" | "$ZE551ML" | "$ZE551ML_CKD")
if [ "$COUNTRY_CODE" = "TH" ]; then
echo "V1_DSDA_ZE550ML_TH" > /config/local_config
elif [ -n "$RFSKUID_DETECT" ]; then
case $RFSKUID_DETECT in
"$FULL_BAND")
echo "V1_DSDA_ZE550ML_FULL" > /config/local_config
;;
"$WW_BAND")
echo "V1_DSDA_ZE550ML_WW" > /config/local_config
;;
"$TW_BAND")
echo "V1_DSDA_ZE550ML_TW" > /config/local_config
;;
"$CN_BAND")
echo "V1_DSDA_ZE550ML_CN" > /config/local_config
;;
"$US_BAND")
echo "V1_DSDA_ZE550ML_US" > /config/local_config
;;
"$TR_BAND")
echo "V1_DSDA_ZE550ML_TR" > /config/local_config
;;
"$TEST_BAND")
echo "V1_DSDA_ZE550ML_TEST" > /config/local_config
;;
*)
echo "V1_DSDA" > /config/local_config
;;
esac
else
echo "V1_DSDA" > /config/local_config
fi
;;
"$ZX550ML")
if [ -n "$RFSKUID_DETECT" ]; then
case $RFSKUID_DETECT in
"$WW_US_BAND")
echo "V1_SINGLE_ZX550ML_WW" > /config/local_config
;;
"$TW_CN_JP_BAND")
echo "V1_SINGLE_ZX550ML_WW" > /config/local_config
;;
"$WW_TEST_BAND")
echo "V1_SINGLE_ZX550ML_WW" > /config/local_config
;;
"$TW_TEST_BAND")
echo "V1_SINGLE_ZX550ML_WW" > /config/local_config
;;
*)
echo "V1_SINGLE_ZX550ML" > /config/local_config
;;
esac
else
echo "V1_SINGLE_ZX550ML" > /config/local_config
fi
;;
*)
echo "V1_DSDA" > /config/local_config
;;
esac
else
echo "V1_DSDA" > /config/local_config
fi
CONFIG_PATH=/local_cfg
PROPS_FILE=init.props
# Get selected software configuration
config=`cat /config/local_config`
mount -o bind /system/etc/catalog/$config /local_cfg
log -p i -t config_init "Activating configuration $config"
# Set properties for the selected configuration
# read all FeatureTeam's init.props file
for f in /local_cfg/*/init.props
do
while read l; do
# Ignore empty lines and comments
case "$l" in
''|'#'*)
continue
;;
esac
# Set property
setprop `echo ${l/=/ }`
done < $f
done
Based on this I expect we can change it in a way we can load WW information and so unlock LTE bands.
Code:
Update #1
#RFSKUID_DETECT=$(cat /sys/module/intel_mid_sfi/parameters/rf_sku_id)
RFSKUID_DETECT=$WW_BAND # this will set RFSKUID_DETECT=0
Changelog:
Update #1: Without changing RFSKUID it will load configuration as if it was WW version;
Attempt #2 - Change XML files
Code:
Change this file content /system/etc/catalog/V1_DSDA_ZE550ML_CN/telephony_config/V1_DSDA_ZE550ML_CN_726x.xml
In line where is mentioned (4g_active_bands) change bands to the wanted bands, as well as in the next 3 lines. Below there are 2 images to help you.
V1_DSDA_ZE550ML_WW_726x.xml example
V1_DSDA_ZE550ML_CN_726x.xml example
Changelog:
Update #1: Change 4G bands in XML file;
In order to unpack/repack boot.img you can use this great tool: http://forum.xda-developers.com/showthread.php?t=2319018
As my Zenfone 2 (CN) didn't arrive yet I cannot start testing this yet.
I expect you to help me discussing about this and replying with your opinions, if this is or not a good way or something else..
Best wishes
João Ramos

Reserved

hello ! !
I am also wainting for my zenfones to arrive (i bought 3) ! !
If i can help with something after just ask ! ! Lest hope there is a method to unlock some LTE bands, as we now LTE Band 20 (800Mhz) is one of the most important to us ! !
PS: i am form Portugal too

x4nick8r said:
hello ! !
I am also wainting for my zenfones to arrive (i bought 3) ! !
If i can help with something after just ask ! ! Lest hope there is a method to unlock some LTE bands, as we now LTE Band 20 (800Mhz) is one of the most important to us ! !
PS: i am form Portugal too
Click to expand...
Click to collapse
Hi there.
For now I really believe this method is reliable, as it will load WW configuration files.. if there are no hardware differences between WW and CN versions (which I believe share the same modem -> Intel 7262) it will work I guess :good:
Here in Portugal for example Vodafone uses 800MHz, 1800MHz and 2600MHz. As far as we have 1800MHz I don't know if we'll have some LTE signal.. we'll have to wait to see! Thanks for your support

FYI, what this does is build local config directory which further allow to load the files specific to WW or CN etc.I tried once to copy WW files to CN but no change in band support.

Have you still got radio working? I read here in XDA that there could be a kind of mechanism to sign files and so the file won't be loaded.. This way we don't touch .xml files. Have you tried this method?

Hi, im from Portugal too and have zenfone2 since July, and this is very interesting for me, but i wouldnt know to where to start to test it since im not very expert in this matters...
But i hope it works..

Let me see if i get it. I need to unpack boot.img, replace config file in it, pack it back up and flash it to get this tested?
If so, that did not work, still getting H+ only and code 2 in /sys/module/intel_mid_sfi/parameters/rf_sku_id

I have 551ML, WW version and I need Band 38 (LTE TD 2600 MHz) to use it in my country (Romania). How can I enable it?
Trimis de pe dispozitivul meu Asus ZenFone 2

bravas said:
I have 551ML, WW version and I need Band 38 (LTE TD 2600 MHz) to use it in my country (Romania). How can I enable it?
Trimis de pe dispozitivul meu Asus ZenFone 2
Click to expand...
Click to collapse
We are working in it [emoji16]
Enviado desde mi ASUS_Z00AD mediante Tapatalk

Intel 7262 + Intel 2230 suports all LTE Frequencies on-Chip, the load of modem radio fw is prior to the boot rom of the phone.
i'm guessing with some work, with a FULLdump of a WW version of zenfone 2 (modem radio / baseband) it will be possible to enable the needed frequencies.
As far as i know ther is NO limitation in hardware in this device.

DiGecko said:
Let me see if i get it. I need to unpack boot.img, replace config file in it, pack it back up and flash it to get this tested?
If so, that did not work, still getting H+ only and code 2 in /sys/module/intel_mid_sfi/parameters/rf_sku_id
Click to expand...
Click to collapse
It's normal to get code 2 in that file. Here we aren't changing that file, just changing the code that this script will load on boot. Have you tried to change the XML file which loads the corresponding file (WW, CN or TW)?
Thanks

x4nick8r said:
Intel 7262 + Intel 2230 suports all LTE Frequencies on-Chip, the load of modem radio fw is prior to the boot rom of the phone.
i'm guessing with some work, with a FULLdump of a WW version of zenfone 2 (modem radio / baseband) it will be possible to enable the needed frequencies.
As far as i know ther is NO limitation in hardware in this device.
Click to expand...
Click to collapse
These are great news. Since there are no hardware differences we're able to unlock all frequencies. So we'll need to find where the modem radio fw is loaded..
BTW, only Intel 7262 supports LTE. Intel 2230 is the modem for the second SIM-Slot.

jopframos said:
These are great news. Since there are no hardware differences we're able to unlock all frequencies. So we'll need to find where the modem radio fw is loaded..
BTW, only Intel 7262 supports LTE. Intel 2230 is the modem for the second SIM-Slot.
Click to expand...
Click to collapse
From Intel papers
The Intel® XMM™ 7262 modem shares the same platform as the Intel® XMM™ 7260 modem, which is now shipping commercially to customers including Samsung.
Delivering category 6 speeds of up to 300 Mbps, the Intel® XMM™ 7262 supports LTE TDD/FDD, WCDMA/HSPA+ and TD-SCDMA, TD-HSPA, and EDGE standards for world markets. The Intel XMM 7262 offers China and the global TD-LTE ecosystem a new cost-effective option for developing mass-market LTE devices. The XMM 7262 modem features:
Global mobility:
o Up to 23 LTE bands on a single SKU for worldwide coverage and roaming
o Multimode design provides seamless connectivity to 2G, 3G and 4G LTE networks.
o Powerful and flexible RF architecture to enable roaming solutions for a world phone market impact.
Carrier Aggregation up to 40 MHz combined bandwidth on a single RF transceiver
High quality, low-power connectivity and voice calling:
o Intel’s second-generation envelope tracking and antenna tuning minimizes power consumption, preserving battery life.
o Power-efficient voice calling over LTE (VoLTE)
Small footprint: Minimized PCB size enables attractive form factors across a range of products, from smartphones and tablets to M2M and connected devices.
We’re proud of our progress and there is more to come. By the end of 2014, we expect to see devices based on the Intel® XMM™ 726x platform available in Australia, China, Europe, Latin America, North America, South Korea and other regions. Onward!
More information on Intel XMM 726x platform is available here.
Visit www.intel.com/mobileto see Intel’s entire portfolio of device, connectivity and network solutions for mobile computing.
Click to expand...
Click to collapse
It will be a matter of time, seek and experiment to unleash the full lte bands.
First thing is to know how and when baseband files are loaded on the phone. Maybe this is firmware related...

So my phone was originally CN, but I changed sku to WW and running latest WW firmware with boot image and all. I have it rooted and have unlocked bootloader with TWRP, so testing things is easy. I changed the file that you modified and repacked and flashed boot.img with no results. If you have anything else to try - let me know.
I used this method to change to WW and got my boot.img and droidboot.img from here. in latest 139 firmware. Whats interesting is even though the phone is running WW firmware and thinks it's on WW sku for OTA, it still loads as CN for the radios.

x4nick8r said:
From Intel papers
It will be a matter of time, seek and experiment to unleash the full lte bands.
First thing is to know how and when baseband files are loaded on the phone. Maybe this is firmware related...
Click to expand...
Click to collapse
I was just wondering that there could be differences in the Asus motherboard or something else...

You have an error in script, because it loads ZX551 settings.
Also there is no sense to work with ramdisk image, because LTE is locked in modem FW, which flashes according to parameters flashed at factory.
The only way to change it is to somehow modify ifwi image.
Right now i have flashed WW version with WW modem at CN phone and WW bands are still not working (even if i manually select 'em with AT commands).
I did it by modifying /factory/PhoneInfodisk/country_code file content to "TH".

Justere said:
You have an error in script, because it loads ZX551 settings.
Also there is no sense to work with ramdisk image, because LTE is locked in modem FW, which flashes according to parameters flashed at factory.
The only way to change it is to somehow modify ifwi image.
Right now i have flashed WW version with WW modem at CN phone and WW bands are still not working (even if i manually select 'em with AT commands).
I did it by modifying /factory/PhoneInfodisk/country_code file content to "TH".
Click to expand...
Click to collapse
I didn't edit the PROJID_DETEC variable. Why do you say that?
You should also modify the / sys / module / intel_mid_sfi / parameters / rf_sku_id file too.. Have you tried it?

This won't change anything, I have flashed WW boot.IMG ,droidboot.IMG and recovery.IMG on my CN zenfone 2 and the bands didn't work so I returned back to stock CN.
If boot.img was responsible for the bands then they should have worked when I had the WW boot.img.

jopframos said:
I didn't edit the PROJID_DETEC variable. Why do you say that?
You should also modify the / sys / module / intel_mid_sfi / parameters / rf_sku_id file too.. Have you tried it?
Click to expand...
Click to collapse
WW_US_BAND is for ZX550 model, not for ZE551.
To modify rf_sku_id file we neet to modify kernel sources, recompile and flash it.
As i wrote few month ago:
LTE bands depends on RF_SKU_ID value.
In kernel sources RF_SKU_ID is defined based on "zenfone2.MR7.1-2.18.40\linux\kernel\arch\x86\platform\intel-mid\intel_mid_sfi.c" file.
Possibly, if we change it to static WW value "0", then LTE bands may become available.
Click to expand...
Click to collapse

Related

850mhz 3g confirmed working on i9000t with jpy

Here are the steps i did and proof.
I first flashed jp2 or the full name is I9000TDOJP2
Here is a thread about it:
http://forum.xda-developers.com/showthread.php?t=851043
I flashed via odin.
If you flash via odin immediately after do a factory reset.
Also dont panic when the first time it boots up it hangs on the S.. It is rebuilding the dalvik cache files which takes a few minutes.. DONT panic and pull battery, just wait.
Now after factory reset. You have froyo and now want to go to 2.2.1.
Also this probably will work on an i9000M (you could also use jl2) IF you HAVE ENOUGH BALLS.. mine is currently in the shop which is why I picked up the i9000T (load off my back not to have to worry about SD card failures!!!!!)
Now you need to download heimdal and install (Note read the readme.txt. there is a driver that needs to be installed b4 it works)
Link is here.
http://www.glassechidna.com.au/products/heimdall/
Note this is necessary as no one has created yet an unbundled version of JPY (ie separate modem, csc, pda etc.)
You run heimdal and flash the factoryfs.rfs zimage param.lfs and cache.rfs
as csc.
You can get jpy from normal place here:
http://www.samfirmware.com/apps/auth/login?why=pw&try=1&wp=1&next=WEBPROTECT-i9000.htm
Note to unpack jpy you need gnu or some other tar: the command is as follows:
C:\galaxy\I9000XXJPY\I9000XXJPY>tar -xvf JPY_JPY_JPY.tar
tar: blocksize = 20
x modem.bin, 12582912 bytes, 24576 tape blocks
x param.lfs, 655360 bytes, 1280 tape blocks
x zImage, 4838208 bytes, 9450 tape blocks
x cache.rfs, 1392640 bytes, 2720 tape blocks
x factoryfs.rfs, 286584832 bytes, 559736 tape blocks
Note: that i AM using the csc from jpy...See the discussion below as to why the csc from jp2 did not work.
------------------------------
i tried to keep the jp2 csc also but when i installed jpy on top of jp2 using heimdal and skipping csc first time when it rebooted it was ok, but system info reported no csc, and indeed there was no csc directory on phone.
So then i tried using heimdal and select the cache/csc from jp2 and it rejected the csc saying firmware was for i9000 and csc was i9000t (not exact message but you get the idea).
oh yes and to get paid/apps etc back in market i had to edit the build.prop.. here is my modified build.prop. you need to be rooted and copy over the one in system with root explorer. Modified to look like jpo 2.2 to market.
-----------------------------------
Once you flash this you now have 2.2.1 on top of 850 mhz 3g jp1 modem.
Again this would probably work for jl2 bell modem as well.. either one is probably fine but I haven't tested that one.
Next some tweeks:
I tested and we now still have 2e and 3e boot loaders and 3 button still worked, BUT we are unable to install update.zip (ie clockwork mod etc.)
So, now i applied the CF root/kernel which gave me root, busybox (i installed the busybox from titanium later anyway), and most importantly you can installed unsigned .zip packages (ie clockwork mod).
the link is here:
http://forum.xda-developers.com/showthread.php?t=788108
the file i used was:
CF-Root-XX_XEU_JPY-v1.3-BusyBox-1.17.1.zip (5.93 MB, 2378 views)
This is flashed again with odin as a pda.
Note: Interestingly the first time it failed...
Unplugged usb and plugged back in and it worked 2nd time (a little high tension there)
Now i got the app csc reset and after booting reset my csc from KOR to XEU
Do this NOW as later it does a reset and you will loose all installed apps.
link is here:
http://forum.xda-developers.com/showthread.php?p=9316558
or you alternative can use code with imei to do this.
Now i used my backup pro and titanium and restored apps (BUT do not restore apps + data) not recommended as some will screw up your phone.
Finally i had to take build.prop off of phone and change so i could see my paid/protected apps in the market place. I think there are some apps to dol this but not sure exactly what they do or what version they put in build.prop because you want it to look like froyo not eclair. I change mine to look like ver 2.2 JP0.
see attachment for my build.prop
I used root explorer to copy over the one in system: (need to change to r/w access in root explorer b4 copy works).
Here are some screen shots showing version: and that 850mhz 3g is in fact working. I did not have to change any phone control settings.
GPS is also working great (I did change this to cold start as I prefer this)
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
<BR>
good luck!!!
NOTE: you can see in the pictures a different battery icon.. That is because I slightly change the framework to give me a few more colorfull battery icons and percentages and transparent bar, but they are only in 20 percent increments.. When I tried a fully modified framework The icons were blank even after clearing dalvik cache.. oh well!
Could i just flash the jl2 modem on top of a 2.2.1 rom? I'm on darkyy's 7.0 and lost 850
Sent from my GT-I9000
Yes you can use tar to extract modem from archive and flash modem.bin with odin. No pit reparation or anything else. Since posting this I have switched to newer jl2 modem as well, better battery life. You probably still will have to use sgs info app and go on and enable 850 Hz frequencies.
Sent from my GT-I9000 using Tapatalk
Thanks for the reply. From what you reckon, is the jl2 modem the most recent 850 based one?
Sent from my GT-I9000
Kewjoe said:
Thanks for the reply. From what you reckon, is the jl2 modem the most recent 850 based one?
Sent from my GT-I9000
Click to expand...
Click to collapse
yes file is dated 12/23 cannot get much newer than that..
lgkahn said:
yes file is dated 12/23 cannot get much newer than that..
Click to expand...
Click to collapse
Thanks bud.
Froyo 2.2.1 in one step, and k12c
Go through this post and comment what you think
Froyo 2.2.1 in one step, and k12c
Greetings guys
Where did you get your i9000?
baoru said:
Where did you get your i9000?
Click to expand...
Click to collapse
newegg.com
lgkahn said:
newegg.com
Click to expand...
Click to collapse
Oh, i9000t always has the 850MHz 3G band, doesn't it?
I somehow thought it applied to the i9000.....
baoru said:
Oh, i9000t always has the 850MHz 3G band, doesn't it?
I somehow thought it applied to the i9000.....
Click to expand...
Click to collapse
yep.. same approach for everything works for i9000 but you dont have to replace modem as you dont need 850 mhz 3g.
(note if you were thinking you would get 3g 850mhz with stock i9000 sorry. hardware is different).
lgkahn said:
yep.. same approach for everything works for i9000 but you dont have to replace modem as you dont need 850 mhz 3g.
(note if you were thinking you would get 3g 850mhz with stock i9000 sorry. hardware is different).
Click to expand...
Click to collapse
i9000t always come with 850MHz 3G...
I don't know why you need to flash anything to get it to work...
Did your i9000t not working with 850MHz 3G before the flash?
baoru said:
i9000t always come with 850MHz 3G...
I don't know why you need to flash anything to get it to work...
Did your i9000t not working with 850MHz 3G before the flash?
Click to expand...
Click to collapse
i9000t and i9000m will not work correctly on 850mhz without the correct regional modem.. so yes it will not work .. this is for froyo.
in addition for eclair it needed the correct modem AND csc to work.
I have tried both darkys roms and insanity(currwntly trying insanity) and i have xxpy modem on my i9000T and it is working perfectly 3g and everything i would expect from the 850 band
Sent from my GT-I9000 using XDA App
Yes, but 850MHZ is 3.5G. Do you see 'H' in your status bar?
Yep of course thats hspda.or.something like that i see it here is the screenshot
This is screenie of phone
As you can see both H and using 850 band now the screen shot of about phone
It appears as i9000 but from the screenshot before this one you can see it is i9000t because of the 850 band. Im also running insanity 0.23 i will update to 0.24 tonight but i expwct the same results a working i9000t with 850 band running on a xxjpy modem
Edit: cant post links i will pm you
Cheers
tried this installation from jl2 firmware on i9000m on bell network and it doesnt work. continuous reboot at white samsung screen.
cbqfly said:
tried this installation from jl2 firmware on i9000m on bell network and it doesnt work. continuous reboot at white samsung screen.
Click to expand...
Click to collapse
Why would you try this on JL2? You have 850mhz on JL2 already.
cbqfly said:
tried this installation from jl2 firmware on i9000m on bell network and it doesnt work. continuous reboot at white samsung screen.
Click to expand...
Click to collapse
jl2 replace one of the bootloaders that wont let you flash other roms.. you will have to flash an alternate kernel.. ie speedmod or i use bln kernel.. then try to reflash jpy ...
to other guy he wants the latest jl2 is not froyo 2.2.1 but 2.2 whereas jpy is latest.
Hi, I have a problem with my I9000M running JL2 : voice calls and mobile network aren't working with my videotron sim card!
I guess I need to change the HSPA/UMTS frequecies of the phone from 850/1900/2100 Mhz to Videotron frequencies (1700/2100 MHz --> Band I (2100); Band IV (1700); Band II (1900)
From what I've read in the forums, I have to flash a modem file using Odin in order to change the phone frequencies.
The T-Mobile Vibrant uses 1700/2100 MHz bands... but I'm not sure JL2 has been released in the US, so not sure i can find a compatible modem file...
Well, I'm not too sure how to solve this, if anyone could help it would be greatly appreciated.
Sent from my GT-I9000M using XDA App

[GUIDE] UNLOCK ADITIONAL BANDS FOR QUALCOMM DEVICES <OnePlus One EDITION>

STOP!
By following this guide, you acknowledge that you and you alone are responsible for the proper-functioning state of your device.
I am not responsible for any harm that may come to your device.
Click to expand...
Click to collapse
In an attempt to make this guide short and comprehensive and also to prevent the completely uninitiated from doing something stupid, I'm going to skip babysteps like <power on your coputer> or <browse to x folder and doubleclick on y>
I start this assuming anyone following it has a basic understanding of what they're doing, what ADB is and also of the risks that come with messing with their device.
Introduction:
This guide will show you how to alter the default baseband frequencies of your qualcomm-based device, augmenting them so that (theoretically) it should work more like a global phone.
Those with an international version of the OPO can still follow this guide, if only to check your unlocked bands against those of your fellow chinese OPO owners. I'm of the opinion that even the international version lacks a few GSM/WCDMA bands, so no harm in trying to unlock some aditional ones.
This guide will, however, NOT UNLOCK ADITIONAL LTE BANDS. At least not for now. It will be updated if and when someone discovers a way to tamper with the LTE bands.
The Guide:
1. Download this archive containing all the necessary files and extract it wherever you please.
2. Enable Android Debugging on your phone and connect it to your computer, making sure MTP and PTP are not enabled in Storage > USB computer connection
3. Open up ADB and type the following:
Code:
adb shell
Code:
su
Code:
setprop sys.usb.config diag,adb
4. Launch Device Manager and look for the Other Devices expandable menu.
5. Right click on the first device listed under that menu (the first of the two A0001 devices listed there) and choose Update Driver Software, Browse my computer for driver software, Let me pick from a list of device drivers on my computer, Show All Drivers, Have Disk and Browse
6. Browse to where you extracted OPO SPECIFIC QUALCOMM BAND UNLOCKER and locate the OPO Diagnostics Driver folder; Inside you will find 32bit and 64bit versions, pick the one relevant to you and inside you will find an .inf file that you will Open. Accept any warning messages that might pop up and let the installation of the driver complete.
7. Once everything is done installing, under Modems in Device Manager you will find HTC USB Modem. Rightclick and select Properties; In the Modem tab in the top left corner you will see Port: COM<number>. Remember that COM<number> or write it down or simply leave the window open for future reference.
8. Open the OPO SPECIFIC QUALCOMM BAND UNLOCKER folder, locate and install QPST 2.7.411 inside QPST > QPST v2.7 Build 4.11
9. Open QPST Configuration, go to the Ports tab, Add New Port (right bottom corner); In the Port field type in the COM<number> you wrote down/remembered from step 7 and in Port Label type OPO and finally click OK (left bottom corner). If you've followed all the steps correctly until here, you should be able to see this in the Active Phones tab:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
10. Locate and launch RF_NV_Manager.exe in the bin folder of the QPST installation directory (normally C:\Program Files (x86)\Qualcomm\QPST\bin)
11. Once you have RF_NV_Manager.exe open, click on Setting > Comport and select COM<number> from the dropdown menu and click OK; Go to File (top right corner) and select Read from Phone and let it finish.
12. Scroll down and click on line 1877 (NV_RF_BC_CONFIG_I); Copy the number displayed on the right-hand side field (the one next to < unsigned 8 bytes > Band Class(s) Supported >)
13. Locate and open mzTool_1.2.1a.exe inside OPO SPECIFIC QUALCOMM BAND UNLOCKER; select Decimal under Input Radix (top left side); Paste the number you copied in step 12 into the Decimal field under RF BC Config. You should now see your currently available bands in the Bit Information field underneath. It should look similar to this:
14. Go to Band Performance (NV Value) tab and check all the GSM and WCDMA bands; Copy the number in the Decimal field under RF BC Config (2,307,813,334,319,039,360); Copy it into a text editor and remove the ","
15. Go back to RF NV Manager and paste the clean number (2307813334319039360) into the number field next to < unsigned 8 bytes > Band Class(s) > --- if you paste the number with commas or brackets instead of just the number, you're an idiot.
16. Press WRITE NV then go to File and select Write Changed NV Items To Phone; Wait 23 seconds (because I like arbitrary waiting times), disable Android Debugging on your phone, unplug it and reboot your device; Once it comes back on, it might take a few seconds for it to acquire signal so don't panic.
ADDENDUM:
NEW LTE UNLOCKING GUIDE
Courtesy of @Albirew
Conclusion:
The only real way to know if the whole thing got applied is to do steps 1 through 13 again (obviously skipping installations) or if you are in an area where you previously had bad or no reception.
I've tested this on my 64GB Chinese OPO running stock rooted CM11S. Everything seems to work properly radio-wise, no worse than before. I'll have to travel a bit around to see if i get better or worse reception.
I'll edit this thread with any relevant information if any becomes available in the future or if anyone feels something is missing.
Thanks:
Thanks to @BlackSoulxxx for his original work with the Qualcomm baseband software and for the modified OPO Drivers
Thanks to @olokos for his original tutorial
Thanks to @Glatzi for bringing the original thread to my attention
Thanks to @fards for finding the diagnostics command that made all this possible
Thanks to @Albirew for writing an extensive LTE tutorial
Thank you for your help I was stucked because MTP in debugging mode was checked, and also I because I did not get the right command (setprop sys.usb.config diag,adb instead of setprop persist.usb.eng 1 in the terminal.
Cheers
PS : Love your comment "if you paste the number with commas or brackets instead of just the number, you're an idiot." ^^
Great!!! well done @devilsshadow Thanks a lot.. :angel::angel::good::good:
And @-Nx- Thanks once again for linking me to this awesome thread!!!!
As Galaxy S5 can use the European LTE 800mhz band, could we check the bits from S5 and try to use them in our OPO to enable 800mhz LTE band?
So for now you don't know how to unlock some LTE bands for the OPO?
Sent from my One A0001 using XDA Premium 4 mobile app
valexi said:
As Galaxy S5 can use the European LTE 800mhz band, could we check the bits from S5 and try to use them in our OPO to enable 800mhz LTE band?
Click to expand...
Click to collapse
The S5 is an Exynos powered device, cant really do much for our Qualcomm based handsets. Besides, as far as I know, no OPO version has the 800MHz band availabe. Check out the band chart below with the available OPO bands:
nielsscholte said:
So for now you don't know how to unlock some LTE bands for the OPO?
Sent from my One A0001 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Not as of right now, no. I'd need confirmation from someone with a chinese OPO in the US to test if flashing the latest CM11 does anything to unlock the additional LTE bands that the Chinese OPO lacks. Otherwise, like I said in the OP, this tutorial is only for unlocking aditional GSM/WCDMA bands.
I'm sure someone smarter than me will find a way to get to the LTE bands as well. Just give it time.
OK thx! I really appreciate your work! Btw the EU GS5 has the Snapdragon 801
Sent from my A0001 using XDA Premium 4 mobile app
Got manically busy week ahead, so not sure I can get to my pc to look at the lte.
If you can do some screen shots of the codes in nv manager (like the 1187) there might be something that shows up.
Sent from my A0001 using Tapatalk
devilsshadow said:
The S5 is an Exynos powered device, cant really do much for our Qualcomm based handsets. Besides, as far as I know, no OPO version has the 800MHz band availabe. Check out the band chart below with the available OPO bands:
Not as of right now, no. I'd need confirmation from someone with a chinese OPO in the US to test if flashing the latest CM11 does anything to unlock the additional LTE bands that the Chinese OPO lacks. Otherwise, like I said in the OP, this tutorial is only for unlocking aditional GSM/WCDMA bands.
I'm sure someone smarter than me will find a way to get to the LTE bands as well. Just give it time.
Click to expand...
Click to collapse
Noob question will i have to do this anytime i flash a new rom or update??
nielsscholte said:
OK thx! I really appreciate your work! Btw the EU GS5 has the Snapdragon 801
Sent from my A0001 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Oh yes, my mistake, although, to my knowledge it uses an 805 and not an 801. Feel free to correct me on that!
skydayzer said:
Noob question will i have to do this anytime i flash a new rom or update??
Click to expand...
Click to collapse
I'm not 100% sure but I think think so. Flashing a new rom also flashes whatever radios come with the rom so that might overwrite everything. Need someone to test this.
fards said:
Got manically busy week ahead, so not sure I can get to my pc to look at the lte.
If you can do some screen shots of the codes in nv manager (like the 1187) there might be something that shows up.
Sent from my A0001 using Tapatalk
Click to expand...
Click to collapse
As this is still a work in progress, any further studies into the matter (from different devices owners as well) will only help us further our goal of unlocking full LTE.
devilsshadow said:
Oh yes, my mistake, although, to my knowledge it uses an 805 and not an 801. Feel free to correct me on that!
I'm not 100% sure but I think think so. Flashing a new rom also flashes whatever radios come with the rom so that might overwrite everything. Need someone to test this.
Click to expand...
Click to collapse
Then i guess this wont affect me since am using Multirom and the custom rom does not flash any radio...
skydayzer said:
Then i guess this wont affect me since am using Multirom and the custom rom does not flash any radio...
Click to expand...
Click to collapse
Yeah, that should be ok.
The EU GS5 really has the 801
Sent from my A0001 using XDA Premium 4 mobile app
@devilsshadow
Could you list what base band available after the hack? That will be very helpful if you could post a screen capture for the step 13 after the modification.
I am particular interested on 1700MHz (AWS or WCDMA-4) at 3G. Thanks a lot
Added to OnePlus One index thread:
[INDEX] OnePlus One Resources Compilation Roll-Up
Transmitted via Bacon
devilsshadow said:
Oh yes, my mistake, although, to my knowledge it uses an 805 and not an 801. Feel free to correct me on that!
Click to expand...
Click to collapse
http://en.m.wikipedia.org/wiki/Samsung_Galaxy_S5
European version has the Snapdragon 801. In Korea they announced a LTE-A version which has the 805 processor. They also said that they will not sell the LTE-A version outside if the Korea.
Since we have the same SoC as the Galaxy S5 European version and S5 can do the 800mhz LTE, technically OPO should be able to use that band alao.
Because radio chip is inside of the Snapdragon 801 SoC, I don't believe that there is any hardware limitations.
About FDD-LTE and WCDMA restriction in China.
It may not be related to Baseband.
What I found is that Color OS could modify modemst1 or modemst2 partition to unlock the restriction in China. It has nothing to do with NON-HLOS.bin.
But here's another possibility that we could modify NON-HLOS.bin directly to get FDD-LTE and WCDMA in China supported. But it is not what color os crack does.
Guys, QC has different modem for different kinds of chip. Yes the radio chip is inside SoC, but it need MDM9xxx modem chip
skydayzer said:
Noob question will i have to do this anytime i flash a new rom or update??
Click to expand...
Click to collapse
Just exclude the baseband when flashing with flashtool and you'll have your bands. OTA update is a different story.
i can not uncheck MTP and PTP when device connected usb debugging is on , Samsung s5 ? can you tell how to uncheck it !?

C6602 LTE unlock test

Here is a unlock test baseband
1. Try it at your own risk
2.before you flash it, backup your TA first, you can use Backup TA or flashtool 'Advanced->Trim Area->Backup'
3.You need to use my modified version flashtool to flash it
4.flash modified baseband ftf and reboot will get it work
5.SO-02E can not flash this ftf. If you flashed will LOST SINGLE, if you did not backup your TA can use this fix to restore single.
This change is permanent, you only need to flash it once.
c6602's LTE possible work with band 1 5 8, because of different power amplifier IC other bands may not work or work poor .
c6602 pcb
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
c6603 pcb
The pcb is same but power amplifier chip in the left area is different
If you want to restore baseband configuration, you can restore TA first and flash the baseband file but exclude TA.
If you have C6603 or SO-02E, I wish you dump TA and send to me to complete unlock.
in NV/TA-log, I found first time init baseband, it will read all item from TA partition 1, such as rfnv files, and baseband config
by writing to TA I have successfully switched baseband configuration from W1358 (WCDMA band 1 2 5 8) to L1357_20W1358 (LTE band 1 3 5 7 20 and WCDMA 1 3 5 8)
but still have a lot of data from TA partition 1 difference, such as rfnv files, so I need more TA S1 Dump to determine which data affect the baseband configuration
here is a modified version flashtool based on flashtool 0.9.18.5 version, which can fast dump all TA data include TA partition 1 and 2
dump step:
click File -> Switch pro to enable Advanced menu
click Advanced -> Trim Area -> S1 Dump to dump ta, them reboot phone to flashmode
if you do not want to send me imei, cert , wlan mac and deviceid info to me, can remove 000007D3,000007E6,000007E7, 00000A00,00000A01,00000A02,00000A03,00001324 lines in 2.ta
000007D3 a SIN file contains imei
000007E6 MARLIN data
000007E7 a cert file contains imei
00000A00,00000A01,00000A02,00000A03 WLAN MAC address
00001324 device Id
please send dump to my gmail “squallatf at gmail.com”
"x10flasher.zip" is the modified version
"x10flasher org.zip" is the original version
Hi,
I saw your work at http://forum.xda-developers.com/showpost.php?p=59778029&postcount=104. It was impressive. Thank you!
I have an L36h (running CyanogenMod since bought, so no original TA backup) and I saw the same values (W12458 and yuga_rowwtr_W12458) in my TA dump (but different addresses from yours).
Have you successfully enabled 4G LTE for your device? Maybe you can get free upgrade to 4G at China Unicom.
Hexchain said:
Hi,
I saw your work at http://forum.xda-developers.com/showpost.php?p=59778029&postcount=104. It was impressive. Thank you!
I have an L36h (running CyanogenMod since bought, so no original TA backup) and I saw the same values (W12458 and yuga_rowwtr_W12458) in my TA dump (but different addresses from yours).
Have you successfully enabled 4G LTE for your device? Maybe you can get free upgrade to 4G at China Unicom.
Click to expand...
Click to collapse
Address is not important, token will same,there is a service hinder me to upgrade to 4g on my card, this month is no hope, I will try in May, can you send me a S1 dump? I will do some compare.
SquallATF said:
Address is not important, token will same,there is a service hinder me to upgrade to 4g on my card, this month is no hope, I will try in May, can you send me a S1 dump? I will do some compare.
Click to expand...
Click to collapse
Well that's too bad, it's just the beginning of April!
I was unable to use your x10flasher.jar with FlashTool 0.9.18.5 for Linux. Error:
Code:
$ ./FlashTool
Not running as root but Sony/SonyEriccson Vendor ID found on your udev rules
if Flashing didn't work well, run flashtool as root
JAVA_HOME not set. Using default value : ./x10flasher_lib/linjre64
ldd: warning: you do not have execution permission for `x10flasher_lib/linux/lib64/udev/libusbx-1.0.so.0.1.0'
Exception in thread "main" java.lang.NoClassDefFoundError: joptsimple/OptionSet
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2693)
at java.lang.Class.privateGetMethodRecursive(Class.java:3040)
at java.lang.Class.getMethod0(Class.java:3010)
at java.lang.Class.getMethod(Class.java:1776)
at sun.launcher.LauncherHelper.validateMainClass(LauncherHelper.java:544)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:526)
Caused by: java.lang.ClassNotFoundException: joptsimple.OptionSet
at java.net.URLClassLoader$1.run(URLClassLoader.java:372)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:360)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
... 7 more
Plus, it would be better if you provide a way for people to strip IMEI and other sensitive information from their dump
Hexchain said:
Well that's too bad, it's just the beginning of April!
I was unable to use your x10flasher.jar with FlashTool 0.9.18.5 for Linux. Error:
Code:
$ ./FlashTool
Not running as root but Sony/SonyEriccson Vendor ID found on your udev rules
if Flashing didn't work well, run flashtool as root
JAVA_HOME not set. Using default value : ./x10flasher_lib/linjre64
ldd: warning: you do not have execution permission for `x10flasher_lib/linux/lib64/udev/libusbx-1.0.so.0.1.0'
Exception in thread "main" java.lang.NoClassDefFoundError: joptsimple/OptionSet
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2693)
at java.lang.Class.privateGetMethodRecursive(Class.java:3040)
at java.lang.Class.getMethod0(Class.java:3010)
at java.lang.Class.getMethod(Class.java:1776)
at sun.launcher.LauncherHelper.validateMainClass(LauncherHelper.java:544)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:526)
Caused by: java.lang.ClassNotFoundException: joptsimple.OptionSet
at java.net.URLClassLoader$1.run(URLClassLoader.java:372)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:360)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
... 7 more
Plus, it would be better if you provide a way for people to strip IMEI and other sensitive information from their dump
Click to expand...
Click to collapse
run as root, you can remove 000007D3,000007E6,000007E7, 00000A00,00000A01,00000A02,00000A03,00001324 lines in 2.ta
000007D3 a SIN file contains imei
000007E6 MARLIN data
000007E7 a cert file contains imei
00000A00,00000A01,00000A02,00000A03 WLAN MAC assress
00001324 device Id
SquallATF said:
run as root
Click to expand...
Click to collapse
Same error. Well guess I'll try getting a Windows desktop.
IF someone get error at the x10flasher modified ver. step
Just rename any name for firmwares folder will be ok.
Hexchain said:
Same error. Well guess I'll try getting a Windows desktop.
Click to expand...
Click to collapse
you need add udev rules http://forum.xda-developers.com/showthread.php?t=1612273
Hi SquallATF, I sent you my dump to e-mail, hope will help! C6602 TA dump.
did this work for ZL? anyone has tested this?
Sent from C6502
@SquallATF
I sent you C6603 TA Dump on e-mail.
send L36h S1 dump Without persional data to your email.
Dear God, called SquallATF,
Could you unlock branded phones bootloader via similar way?? It would be awesome
Already flash my L36H(c6602) with your attachments "TA+v3 baseband".
The China Unicom 4G FDD-LTE is perfect with DATA and CALL.:victory:
See the ScreenShots.:fingers-crossed:
The telecom I'm using only have band 28 and band 3 (LTE)
But I just got the signal this morning. Even through the signal is weak.
Maybe C6602 is till possible to use band 3
Any chance to use band 4 AWS?
Enviado desde mi Sony Xperia ZL (C6502) mediante Tapatalk 4
yuht10veyu said:
Already flash my L36H(c6602) with your attachments "TA+v3 baseband".
The China Unicom 4G FDD-LTE is perfect with DATA and CALL.:victory:
See the ScreenShots.:fingers-crossed:
View attachment 3254404
View attachment 3254405
Click to expand...
Click to collapse
what android version you use ?
i tried unlock on 4.4.4 but cannot connecting lte.
in my country works onli LTE bands 9 and 20 (800MHz).
---------- Post added at 02:14 PM ---------- Previous post was at 02:02 PM ----------
its works on 4.4.4, maybe needs another android version ? I unlock successfully on 4.4.4 but not see LTE signal. In my country works 800/1800 lte frequency.
Gstream said:
what android version you use ?
i tried unlock on 4.4.4 but cannot connecting lte.
in my country works onli LTE bands 9 and 20 (800MHz).
---------- Post added at 02:14 PM ---------- Previous post was at 02:02 PM ----------
its works on 4.4.4, maybe needs another android version ? I unlock successfully on 4.4.4 but not see LTE signal. In my country works 800/1800 lte frequency.
Click to expand...
Click to collapse
Because C6602 seems support band 1,5,8 only.
So your phone doesn't find LTE signal
pls for lollipop :victory:
ozaki86 said:
Because C6602 seems support band 1,5,8 only.
So your phone doesn't find LTE signal
Click to expand...
Click to collapse
so if i flash 4.4.2 and try again it's not give resultat ?

Unlock FDD LTE Band 3 (1800MHZ) on OnePlus 2

Hello,
I received my Oneplus 2 today and it does not support the LTE Band 3. It`s the north USA Version and i would like to ask if anyone figured out a method to unlock the LTE Band 3 (1800mhz) . It`s because the Hardware of the Oneplus USA Version is the same like the European version.
best ragards
That would be amazing if some one could figure that out. But as I did my research it seems that it's not possible that there's a hardware difference.
shlomi_vanono20 said:
Hello,
I received my Oneplus 2 today and it does not support the LTE Band 3. It`s the north USA Version and i would like to ask if anyone figured out a method to unlock the LTE Band 3 (1800mhz) . It`s because the Hardware of the Oneplus USA Version is the same like the European version.
best ragards
Click to expand...
Click to collapse
Should be the same procedure as the HTC M9 since they're the same processor. And for the prep work (drivers and enabling the modem diag mode) as in this thread for the OnePlus One.
TheManDroid said:
Should be the same procedure as the HTC M9 since they're the same processor. And for the prep work (drivers and enabling the modem diag mode) as in this thread for the OnePlus One.
Click to expand...
Click to collapse
Do the changes to the band stay after rebooting or upgrading the OS to a newer version? I wanted to unlock band 3 as well on my OP2.
I haven't tried writing the modem configuration yet to see if it sticks or not but was able connect the phone and read the configuration from it by following the instructions from the 2 posts I mentioned.
Say if you got Chinese oneplus 2 and changed software on it would it work on bands 20 I've seen this question asked before but can't find the post
Sent from my LG-H815 using XDA Free mobile app
anyone found a way to unlock band 3?
Have a look at this post
I suggest you to keep 3G instead of LTE because battery draining is so faster under LTE Mode. If you stay a place that have a poor LTE signal,that would be your battery killer.
acidreian said:
That would be amazing if some one could figure that out. But as I did my research it seems that it's not possible that there's a hardware difference.
Click to expand...
Click to collapse
Hi, this research includes some whitepaper research?, Does it actually has different hardware?, just wondering if someone knows this by solid proof?
To know if there is hope for us (Buyers of wrong OP2 version )
I'm using A2005 usa model in India and I'm unable to use it on Airtel 4G in India. When I spoke to the OnePlus customer service they said it will need to replace the motherboard as it's a Hardware issue. I'm waiting for the motherboard to arrive from china as they don't have it yet in India. So basically it's a Hardware issue on oneplus 2 unlike it's ancestors.
rahulrai said:
I'm using A2005 usa model in India and I'm unable to use it on Airtel 4G in India. When I spoke to the OnePlus customer service they said it will need to replace the motherboard as it's a Hardware issue. I'm waiting for the motherboard to arrive from china as they don't have it yet in India. So basically it's a Hardware issue on oneplus 2 unlike it's ancestors.
Click to expand...
Click to collapse
They will do it for free? Or what is the charge?
Ok, guys, I`ve unlock NVram to write. Now I can save any values to change enabled bands.
Intruction:
Requirements:
OnePlus 2 with TWRP and rooted.
QXDM Pro, drivers, etc, as described here http://forum.xda-developers.com/oneplus-one/general/guide-unlock-aditional-bands-qualcomm-t2877031
Stock ROM OnePlus2Oxygen_14_OTA_011_all_1512111634.zip.
Attached file.
Just unzip attachment and replace file in ROM OnePlus2Oxygen_14_OTA_011_all_1512111634.zip, in RADIO folder. Flash via twrp.
After boot you will see warning "NV backup corrupted" or something like this, dont worry.
Use QXDM to change band as you want, reboot and check. Voilya. But LTE will not work, because it is hardware issue, lol.
A few words about attached file. I just unzip this file from stock ROM, search AC 1Ah (6828 little endian) and DB 08 (56072, US LTE band) together and replace DB 08 with DF 10. Dont ask, what I did, I dont know, lol. But it is work.
Implex said:
Ok, guys, I`ve unlock NVram to write. Now I can save any values to change enabled bands.
Intruction:
Requirements:
OnePlus 2 with TWRP and rooted.
QXDM Pro, drivers, etc, as described here http://forum.xda-developers.com/oneplus-one/general/guide-unlock-aditional-bands-qualcomm-t2877031
Stock ROM OnePlus2Oxygen_14_OTA_011_all_1512111634.zip.
Attached file.
Just unzip attachment and replace file in ROM OnePlus2Oxygen_14_OTA_011_all_1512111634.zip, in RADIO folder. Flash via twrp.
After boot you will see warning "NV backup corrupted" or something like this, dont worry.
Use QXDM to change band as you want, reboot and check. Voilya. But LTE will not work, because it is hardware issue, lol.
A few words about attached file. I just unzip this file from stock ROM, search AC 1Ah (6828 little endian) and DB 08 (56072, US LTE band) together and replace DB 08 with DF 10. Dont ask, what I did, I dont know, lol. But it is work.
Click to expand...
Click to collapse
There is easier way to do that without corrupting the backup.
Simply change the value is QXDM.
Then in the phone dial *#268#
Press the NV parameters
Press the Static NV Force Backup.
This will copy the new values to the backup, and they will stick later on.
BTW, to be on the safe side, make sure to backup your dycnvbk, stanvbk and EFS.
Not working for me. Cause com.android.phone crash after dial. May be because my backup is corrupted. Later will try with stock backup. But thank you anyway.
I am using the stock image with the stock phone app.
I am using Mokee, chinese AOSP firmware. BTW, I just erased nv backup partition and keep playing with nv ram. Hope will not brick my phone ))
What version do you have? US/EU/CH?
In case you have EU, cab you PM me with qcn of your device?
Unfortunatelly I have US version.
I know a way to add bands in snapdragon 801 (i did in xiaomi mi note) never tried in OPT since it has all bands i need . but it should be the same. Search google for adding bands in mi note

[MODEM][ODIN] Samsung Galaxy S4-mini GT-I9195 (Upd. Oct. 16. - 2017)

This thread is mainly created because the previous thread by @spitya seems to be abandoned, and several users have expressed their desire that I would keep these modems in a separate thread.
It also serves the purpose that I can keep the OP updated with the desired info, instead of referring to some post buried deep in the thread.
Disclaimer:
Code:
/* Your warranty is now void.
*
* We are not responsible for bricked devices, dead SD cards,
* thermonuclear war, or you getting fired because the alarm app failed.
* Please do some research if you have any concerns about features included in this procedure
* YOU are choosing to make these modifications, and if you point the finger at us
* for messing up your device, we will laugh at you.
*/
The files made available here are extracted from the official Samsung Firmware made available from SamMobile website, it will save you from downloading in access of 800MB of data with average download speed of 15KB.
Mainly it will be firmware specified for the EU market, as I am located here and will be using these firmwares, if you want your specific region included, I would appreciate if you would make sure to make the files available as they become updated for your region, since I don't intend to waste time on something I am not going to be using.
Since I intend not to delete any of the files, it is also essentially a resource with all the different Modem versions released.
User Guide:
Under Windows using Odin:
Extract latest version of Odin to your computer.
Install Samsung Mobile Phone Drivers for Odin to find your device.
Boot your phone into download mode, by pressing [Volume down] + [Home] + [Power]
- Once you reach the Download mode warning screen, press [Volume Up] to continue.
Open Odin
[1]Connect phone and wait until you get a blue sign in Odin
[2]Place the desired modem file in the [AP] slot.
[3] Go to the Options section and make sure Auto Reboot, Re-Partition and F. reset time are unmarked.
[4]Push [Start]
Once odin reports "Success..." message in the Message box, boot your phone into download mode once again and repeat step 1 - 4 once more.
Under Windows/Linux using Heimdall:
Under Windows disregard the sudo part of the command, You can use 7zip to extract the contence of the modem.
Get the latest version of Heimdall, if you are using one of the Debian derivatives you can install the distribution package heimdall-flash
Extract the modem tar.md5 file using the command
tar -xvf I9195XXUCOG1.tar.md5​
Boot your phone into download mode, by pressing [Volume down] + [Home] + [Power]
- Once you reach the Download mode warning screen, press [Volume Up] to continue.
Connect your phone using a proper USB cable
See if your phone is detected using the command:
sudo heimdall detect​
Flash the modem files using the command:
sudo heimdall flash --no-reboot --MODEM NON-HLOS.bin --TZ tz.mbn --RPM rpm.mbn --verbose​
Reboot your phone into download mode once again, and flash the modem a second time.
The modem found here is only working with Samsung Galaxy S4-mini (GT-I9195), it will not work with any other variant of the S4-mini.
Weather the latest modem gives you a boost in signal is very depending on your location and provider, the best advice is to try a few different modems and select the one you feel works best in your case, how ever it is recommended to use the latest since it contains the last security fixes from Samsung.
File versioning:
Some of you might be unaware of how the Samsung versioning of the Modem is layed out, I will try to give an accurate description of what is what in the versioning.
The filename displays the version as I9195XXUCOG1, the layout of the versioning is as follows:
I9195 - Identity of the phone supported
XXUC - Identity of location [XXU] - European location (Unbranded)
O - Year of version (here 2015)
G - Month of version (here 7.th [July])
1 - Compilation number, goes from 1 - 9 and A - Z
Download section:
EU (Nordic)
Latest Modem: I9195XXUCQL2
A collection of the modems are available from AndroidFileHost
[Reserved]
Thanks, now is much better to find new modems!
Good job, thank you very much!
Perhaps you can consider adding Heimdall instructions to the first thread?
Cheers!
JimmyRay said:
Perhaps you can consider adding Heimdall instructions to the first thread?
Click to expand...
Click to collapse
It is done
This is a convenient site for determining which modem is best for your location: https://samsung-firmware.org/de/model/GT-I9195/
hi all-one fast question:what is the difference between the 60mb version from this thread and the 900mb from the sammobile.thank
iordache_srn said:
hi all-one fast question:what is the difference between the 60mb version from this thread and the 900mb from the sammobile.thank
Click to expand...
Click to collapse
Sammobile image contains full firmware, stock kernel, apps, base - everything.
This is the modem extracted from that image.
Sent from my SM-G930F using XDA-Developers mobile app
M1chiel said:
This is a convenient site for determining which modem is best for your location: https://samsung-firmware.org/de/model/GT-I9195/
Click to expand...
Click to collapse
Which region would you recommend for those in the US? (Using AT&T prepaid carrier)
redjamesg said:
Download section:
EU (Nordic)
Latest Modem: I9195XXUCPD1
Download from my Personal Google Drive, browse to the required location ie: GT-I9195
Click to expand...
Click to collapse
A new baseband version I9195XXUCPE1 has been released for the i9195
http://www.sammobile.com/firmwares/database/GT-I9195/
http://www.sammobile.com/firmwares/download/73685/I9195XXUCPE1_I9195SFRCPE1_SFR
The modem .bin file is modified on 2016-05-17, compared to 2016-04-08 of the I9195XXUCPD1 modem
and the whole Stock French ROM is updated to Security Patch Level 2016-05-01.
It's nice that the device is still being in active development.
Anyway, if anyone is interested, you can grab it in tar archive from here:
I9195XXUCPE1.tar
@redjamesg
feel free to do your magic anytime...
soseono said:
Which region would you recommend for those in the US? (Using AT&T prepaid carrier)
Click to expand...
Click to collapse
Well, the hard way would be to check your exact model number (i9190, i9195, i9197, i257M)
and check at GsmArena to see the 3G & LTE Bands supported for each model
3G bands HSDPA 850 / 900 / 1900 / 2100 - I9190, I9195, I9197, I257M
4G bands LTE band 1(2100), 3(1800), 5(850), 7(2600), 8(900), 20(800) - I9195
LTE 850 / 1800 / 2600 TD-LTE 2300 - I9197
LTE 700 / 2600 / 850 / 1700 / 1900 / 2100 - I257M
Click to expand...
Click to collapse
and cross check that with the 3G & LTE Bands that AT&T supports...
Or you could try the easy way, just give it a try,
from my experience the I9195XXU modems are the more cross-compatible
(initially designated for Europe, but according to forum members
compatible with networks from Asia, Australia and America)
and are actively developed on top of that.
So why don't you grab the most recent I9195XXUCPE1 modem?
YMMV, and take a full backup beforehand,
but you could just grab the latest T-Mobile baseband like this one
just for peace of mind, and if the latest baseband available is not working, just install the one for T-Mobile.
(Or just reinstall the baseband of the ROM you're currently using).
I'm picking the one for T-Mobile as a safety measure cause I think that it's compatible with AT&T network
Wiki
AT&T and T-Mobile use GSM, while Verizon, Sprint, and U.S. Cellular use CDMA.
Click to expand...
Click to collapse
For your convenience, you can grab just about any modem version released
from the collection of @redjamesg
Hope it helps.
McClane13 said:
A new baseband version I9195XXUCPE1 has been released for the i9195
http://www.sammobile.com/firmwares/database/GT-I9195/
http://www.sammobile.com/firmwares/download/73685/I9195XXUCPE1_I9195SFRCPE1_SFR
The modem .bin file is modified on 2016-05-17, compared to 2016-04-08 of the I9195XXUCPD1 modem
and the whole Stock French ROM is updated to Security Patch Level 2016-05-01.
It's nice that the device is still being in active development.
Anyway, if anyone is interested, you can grab it in tar archive from here:
https://wchwra.dm2301.livefilestore...KtLPgg9WA1y8/I9195XXUCPE1.tar?download&psid=1
@redjamesg
feel free to do your magic anytime...[
https://wchwra.dm2301.livefilestore....ownload&psid=1 link not working :-8
Click to expand...
Click to collapse
iordache_srn said:
link not working :-8
Click to expand...
Click to collapse
how about this one:
I9195XXUCPE1.tar
McClane13 said:
Anyway, if anyone is interested, you can grab it in tar archive from here:
I9195XXUCPE1.tar
@redjamesg
feel free to do your magic anytime...
Click to expand...
Click to collapse
Thanks for the heads up McClane, that one had slipped my radar, it is now live at my collection.
I9195XXUCPE1 works good.
I had I9195XXUCPA1, but I think UCPE1 has a tad better reception in my area (Germany)
Thanks for those uploads!
McClane13 said:
how about this one:
I9195XXUCPE1.tar
Click to expand...
Click to collapse
This is working.,.thank you
Hello, I want to root my Phone: KOT49H.I9195XXUCOD3
How can I root this Phone? Many website gave different solutions.
I hope you van help me.
iejoor4u said:
Hello, I want to root my Phone: KOT49H.I9195XXUCOD3
How can I root this Phone? Many website gave different solutions.
I hope you van help me.
Click to expand...
Click to collapse
Since this is the modem thread and not the rooting thread, I will direct you to that one instead http://forum.xda-developers.com/showthread.php?t=2364980
Just use TWRP instead of CWM http://forum.xda-developers.com/showthread.php?t=2678420
Sent from my SM-G930F using XDA-Developers mobile app
Hello and thanks for the thread and for your work
I checked on sammobile and the last modem released in Italy is I9195XXUCPB1, but the lastest at all is I9195XXUCPE1 (which is noted for France). So my question is, which one will be better choice for Italy, considering that they advice to check sammobile for the best country-based modem, but both of them are for Europe and I think France uses the same frequencies and bands as Italy?
Thank you
They both will work in france/italy/Germany/UE based, how ever the CSC instructions for the region might be altered for a specific provider, so if you are on orange and living in Italy and flash Nordic released modem, you could potentiale lose functions like the SIM tools for USSD codes regarding Secretary functions.
The baseband frequencies will always work for any EU based location, since it is the same bands beeing used throughout EU.
Sent from my SM-G930F using XDA-Developers mobile app

Categories

Resources