Database Users

IMEI NULL and BASEBAND unknown QXDM QUALCOMM

hello goodnight I want me help in recovering the IMEI and BASEBAND because I wanted to change the frequency bands with QXDM QUALCOMM program previously did successfully with LG G3, but with the LG G2 did change bands frequency, but instead of pressing the close button, I gave the RESET button on the QXDM QUALCOMM program.
I proceeded to close the program and restart the device and oh surprise EFS lost and have no IMEI or BASEBAND QXDM QUALCOMM and the program does not read me the ITEM NV or anything and followed all the steps to recover EFS and nothing else is not.
any suggestions or something? the device works well but can not use any microsim
I recommend using octopus / octoplus?
I hope I'm desperate help
I have wifi, root, TWRP, everything works but I have no IMEI or BASEBAND I think that is the NVM

edmundo_daniel said:
hello goodnight I want me help in recovering the IMEI and BASEBAND because I wanted to change the frequency bands with QXDM QUALCOMM program previously did successfully with LG G3, but with the LG G2 did change bands frequency, but instead of pressing the close button, I gave the RESET button on the QXDM QUALCOMM program.
I proceeded to close the program and restart the device and oh surprise EFS lost and have no IMEI or BASEBAND QXDM QUALCOMM and the program does not read me the ITEM NV or anything and followed all the steps to recover EFS and nothing else is not.
any suggestions or something? the device works well but can not use any microsim
I recommend using octopus / octoplus?
I hope I'm desperate help
I have wifi, root, TWRP, everything works but I have no IMEI or BASEBAND I think that is the NVM
Click to expand...
Click to collapse
Unless you made a backup or flashing a completely stock rom to the device works then you will have to send it in.

[GUIDE][No Network or No 3g/LTE]ACTIVATE 2G 3G & 4G on LG G3

USE AT YOUR OWN RISK
This guide is intended for those individuals who can not use 3g or LTE but 2g works perfectly for them or they have lost their network and flashing different radios does not help
To check if you have this problem, go to settings>more>Mobile Network>Manual Search
You should have GSM / WDCMA/LTE or others depending on your network from all networks in your area.
What do you need :
*Drivers installed
*USB debugging (enable by going into settings>software information> tap on build number 10 times and developer options will appear in settings at the end. Enable USB debugging from there)
*ROOT
*QPST (QPST DOWNLOAD) LINK2
*EFS BACKUP TOOL (EFS BACKUP THREAD)
* Device specific backup of QCN (FIND IT YOURSELF AS IT WILL CHANGE YOUR IMEI TOO)
*DIAG MODE ENABLED
This is how to enable diag mode via platform tools using ADB on LG devices
Code:
adb shell
su
echo 1 > /sys/devices/platform/lg_diag_cmd/diag_enable
setprop sys.usb.config acm,diag,mtp,adb
It is preferred to clear these partitions by using these commands and restart your phone before flashing qcn files. I wiped wrong partitions (tz)using these commands and I got a HARD BRICK. YES A HARD BRICK so be very careful
Code:
dd if=/dev/zero of=/dev/block/mmcblk0p21
dd if=/dev/zero of=/dev/block/mmcblk0p22
dd if=/dev/zero of=/dev/block/mmcblk0p24
Restore by, where XX is the number and YY name of partition
Code:
dd if=/dev/block/[B]mmcblk0pXX/B] of=/sdcard/[B]YY[/B].epb
Example
Code:
dd if=/dev/block/mmcblk0p9 of=/sdcard/system.img
However, you can go ahead and clear these partitions only if you had a previous backup by blocks like EFS FILE EXPLORER. modemst1, modemst2, fsg, fsc,dbi, ddr, pad
Check which partition corresponds to which block by
Code:
ls -al /dev/block/platform/msm_sdcc.1/by-name
Once your device is connected, drivers and software installed,
You may need to first go to QPSTConfig which is located at QPST > Bin. There you will need to select port which will show your snapdragon model.
Go to QPST > Bin> QPSTServer.exe
1.A globe would appear in taskbar. Click on it and select software download.
2.Select port of your diagnostic mode in restore tab of software download
3. Once in software download, backup your current QCN (just as a backup to be safe)
4. Restore the QCN you found from google. Make sure it is device specific (use d850 QCN for d850 only)
5. Device would restart and automatically start to search 3g and LTE signals
Good luck
My original QCN was 31kb which clearly showed lost of data but the one that worked was about 500kb.
Lastly there are other methods to restore as well which I will look into so I can post in more details so your IMEI does not change.
Edit: You can do it by changing NV VALUE of 457 to your default value to keep your imei number as well
I will try to backup my radio partitions if someone needs help to fix their network issues or other possible solutions that could be found
HOW TO REVERT YOUR IMEI BACK TO ORIGINAL
1. Download EFS Professional. FROM HERE
2. Make sure you are rooted and busy box working.
3. Use commands as stated above to boot your phone in DIAG mode. This can be done anytime after connecting your phone to the PC.
4. Go to Qualcomm NV tools
5. Choose right port and connect.
6 Go to Secure Ops. tab and change imei from there. Make sure you have a full backup.
If this fails, you can use QXDM and go to NV tools and manually change your IMEI back to its real value. You will need to go to NV Values tab and then on side tab choose Security from All, and then change IMEI number to your real one. You can check details how to change values in QXDM in futher reading below. Samsung S5 thread explains it really well.
If you still are not sure, you can use QPST software. Go to NV manager and find your IMEI number after connecting the phone in diag mode. Usually it is 550 or 457 value.
Use Imei converter from attached files below and insert the converted values.
Good Luck
THREADS TO LOOK FOR FURTHER READ
Unlock Bands and how to boot into Diag mode All credits to @olokos for his guide
Unlock LTE bands and go into diag mode
All credits to @fffft for his guide
FOR BEST RESULTS WHICH I FOUND HAD MORE SUCCESS WITH
1. First understand the problem fully here
2. Flash a working qcn to your device
3. Wipe partitions as commands given above
4. restart
5. Flash a working qcn on it again. Preferably the same one
6. Check if you get signals now, if not then do a factory reset and see
Profit ? No
7. Install TOT stock 4.4.2 or Lollipop (I had more success with Lollipop)
8. Install a qcn from another device. Just to break all your signals (do at your own risk) I flashed a D855 qcn to my d850
9. Restart and wipe partitions
10. Reflashed working Qcn again
Profit ? No
It did not work till here so I moved to stock lollipop by flashing zip in TWRP. If you have TOT method, that is better.
So I went to flash Lollipop stock with modem of D850. (because it was zip and did not include modem. In TOT/ KDZ all partitions are flashed so you do not need to flash modem separately) So i wiped partitions again and then I flashed QCN using cracked version of Z3x Lg Tools twice. (same qcn but two times) and then restarted.
It restored everything back. Everything came to work fine
Z3X Cracked Download here
WHAT YOU CAN DO TO HELP OTHERS (needs root and busybox installed)
I suggest you make a backup of your EFS via TWRP & EFS TOOL before tinkering with hidden menu or anything at all. If you do these steps correctly, you do not risk of any damage to your device.
Download EFS Tool from here
http://forum.xda-developers.com/atta...6&d=1419867628
Main thread of it
http://forum.xda-developers.com/gala...546?styleid=18
1. go in backup tab
2. select all partitions
3. Select 3 partitions
backup modem, modemst1 and modemst2 and upload it for me so I can try to restore the settings to see if that works.
MAKE SURE YOU WRITE YOUR DEVICE MODEL when attaching those mentioned partitions AND DOUBLE CHECK IT AS FLASHING WRONG radios can permanently damage your device.
DEVICE I FIXED WAS D850 ATT Variant and had success with other variants as well
UPDATE
I have attached a D855 qcn with null imei. You will need to change your imei yourself which you can find by removing your battery. Make sure to make a backup before trying anything and I WILL BE NOT RESPONSIBLE
HISTORY --- JUST TO COMPARE IF YOU HAVE SIMILAR PROBLEM
hi there,
I am working to fix the problem many users have faced and therefore trying to find possible solutions. I need some partition images from you guys if you can provide me so I can try to fix the issues.
THE PROBLEM AND HOW IT STARTED :
I have got a D850 which I am using in Europe. The problem started when I inserted an LTE enabled sim and went to hidden menu to change my mode to LTE only, I was on Fulmics Rom 2.7 Lollipop at that time. Before that, ii network search, I could see all WCDMA, GSM and LTE bands used by different providers by manual search.
After changing it to LTE only, I could not see any signal bars and it started searching. As I was in an area where LTE signals were weak, so I thought maybe I need to change back to GSM/WCDMA/LTE from settings. Signals returned to normal but only to gsm. LTE and 3G were lost as searching for networks did not help at all.
I tinkered with hidden menu and selected GSM/WCDMA/LTE ( 3845#*850# ) from hidden menu
and
used this ( *#*#4636#*#* ) to change back to GSM/WCDMA/LTE from another hidden menu.
It didnot help.
I flashed different modems (one from kitkat and two versions from Lollipop) but that didnot help either.
I reverted back to KITKAT using TOT method and the WCDMA and LTE were lost forever when i tried to search manually. So I made an EFS backup and started tinkering with hidden method.
Actually I was not expecting that the values would be affected by using the hidden menu to fix my network to LTE only.
I then backup my EFS and tinkered with hidden menu and i was successful in bringing back LTE, however, I was stuck with no 3g.
Using build prop editor, I changed my operator from ATT to OPEN (as ATT does not show default selection menu for GSM/WCDMA/LTE in settings/ both hidden menus) which enabled the option by which I could changed my preferred network type.
In hidden menu, I just enabled VoLTE in LTE > Modem Settings > VoLTE On which brought back LTE.
Next I installed QPST & QXDM to check my NV values and IMEI.
All of those were perfectly fine. No problem at all.
Strangely all the NV values are right. I restored my EFS to old state where I didnot have LTE or 3g. The LTE was gone again.
I again enabled VoLTE from hidden menu and LTE came back.
See attached image for reference.
POSSIBLE SOLUTION :
I think the problem lies in ATT settings as it has preset operator settings which changes from GSM to WCDMA to LTE depending on its values.
Once I selected LTE only, I disabled the WCDMA and somehow broke the AT&T preset settings as you can not change preferred network from settings like D855 or other models. Somehow we need to re-enable these and one possible way would be to flash modemst 1 and modemst 2 from backup.
Please help me find the possible solution
PS : For all those who are wondering if i tried other sims and tried to use 4g/3g on another device. Yes i did and the problem is only in D850
I also made a proper working APN. Plus I check which network I am on by using *#*#4636#*#*
dd if=/home/med/Desktop/tz.img of=/dev/sdb6
Click to expand...
Click to collapse
ANY SUGGESTIONS ?[/U][/COLOR][/B] @hyelton
People who can not flash QCN need to break their Lg lock which is done by flashing someone else Twrp backup of same device on your phone. After this, you will be able to flash QCN without issues

Hnk1 said:
hi there,
I am working to fix the problem many users have faced and therefore trying to find possible solutions. I need some partition images from you guys if you can provide me so I can try to fix the issues.
THE PROBLEM AND HOW IT STARTED :
I have got a D850 which I am using in Europe. The problem started when I inserted an LTE enabled sim and went to hidden menu to change my mode to LTE only, I was on Fulmics Rom 2.7 Lollipop at that time. Before that, ii network search, I could see all WCDMA, GSM and LTE bands used by different providers by manual search.
After changing it to LTE only, I could not see any signal bars and it started searching. As I was in an area where LTE signals were weak, so I thought maybe I need to change back to GSM/WCDMA/LTE from settings. Signals returned to normal but only to gsm. LTE and 3G were lost as searching for networks did not help at all.
I tinkered with hidden menu and selected GSM/WCDMA/LTE ( 3845#*850# ) from hidden menu
and
used this ( *#*#4636#*#* ) to change back to GSM/WCDMA/LTE from another hidden menu.
It didnot help.
I flashed different modems (one from kitkat and two versions from Lollipop) but that didnot help either.
I reverted back to KITKAT using TOT method and the WCDMA and LTE were lost forever when i tried to search manually. So I made an EFS backup and started tinkering with hidden method.
Actually I was not expecting that the values would be affected by using the hidden menu to fix my network to LTE only.
I then backup my EFS and tinkered with hidden menu and i was successful in bringing back LTE, however, I was stuck with no 3g.
Using build prop editor, I changed my operator from ATT to OPEN (as ATT does not show default selection menu for GSM/WCDMA/LTE in settings/ both hidden menus) which enabled the option by which I could changed my preferred network type.
In hidden menu, I just enabled VoLTE in LTE > Modem Settings > VoLTE On which brought back LTE.
Next I installed QPST & QXDM to check my NV values and IMEI.
All of those were perfectly fine. No problem at all.
Strangely all the NV values are right. I restored my EFS to old state where I didnot have LTE or 3g. The LTE was gone again.
I again enabled VoLTE from hidden menu and LTE came back.
REQUEST , WHAT YOU CAN DO TO HELP (needs root and busybox installed)
I suggest you make a backup of your EFS via TWRP & EFS TOOL before tinkering with hidden menu or anything at all. If you do these steps correctly, you do not risk of any damage to your device.
Download EFS Tool from here
http://forum.xda-developers.com/atta...6&d=1419867628
Main thread of it
http://forum.xda-developers.com/gala...546?styleid=18
1. go in backup tab
2. select all partitions
3. Select 3 partitions
backup modem, modemst1 and modemst2 and upload it for me so I can try to restore the settings to see if that works.
See attached image for reference.
POSSIBLE SOLUTION :
I think the problem lies in ATT settings as it has preset operator settings which changes from GSM to WCDMA to LTE depending on its values.
Once I selected LTE only, I disabled the WCDMA and somehow broke the AT&T preset settings as you can not change preferred network from settings like D855 or other models. Somehow we need to re-enable these and one possible way would be to flash modemst 1 and modemst 2 from backup.
Please help me find the possible solution
PS : For all those who are wondering if i tried other sims and tried to use 4g/3g on another device. Yes i did and the problem is only in D850
I also made a proper working APN. Plus I check which network I am on by using *#*#4636#*#*
ANY SUGGESTIONS ?[/U][/COLOR][/B] @hyelton
Click to expand...
Click to collapse
Maybe the D850 does NOT have the bands that the carrier your trying to use it on? Flashing another modem wont enable bands the hardware does not have.

hyelton said:
Maybe the D850 does NOT have the bands that the carrier your trying to use it on? Flashing another modem wont enable bands the hardware does not have.
Click to expand...
Click to collapse
@hyelton
Update :
Please check the guide

Hnk1 said:
USE AT YOUR OWN RISK
This guide is intended for those individuals who can not use 3g or LTE but 2g works perfectly for them or they have lost their network and flashing different radios does not help
What do you need :
*Drivers installed
*USB debugging
*QPST (google it or google UNLOCK ALL BANDS QUALCOMM XDA and download from one of the forum there as it is banned)
*EFS BACKUP TOOL (available at xda or find link in history below)
* Device specific backup of QCN (FIND IT YOURSELF AS IT WILL CHANGE YOUR IMEI TOO)
*DIAG MODE ENABLED
This is how to enable diag mode via platform tools using ADB on LG devices
1) adb shell
2) su
3) echo 1 > /sys/devices/platform/lg_diag_cmd/diag_enable
4) setprop sys.usb.config acm,diag,mtp,adb
Once your device is connected, proper drivers and software installed,
Go to QPST > Bin> QPSTServer.exe
1.A globe would appear in taskbar. Click on it and select software download.
2.Select port of your diagnostic mode in restore tab of software download
3. Once in software download, backup your current QCN (just as a backup to be safe)
4. Restore the QCN you found from google. Make sure it is device specific (use d850 QCN for d850 only)
5. Device would restart and automatically start to search 3g and LTE signals
Good luck
My original QCN was 31kb which clearly showed lost of data but the one that worked was about 500kb.
Lastly there are other methods to restore as well which I will look into so I can post in more details so your IMEI does not change
I will try to backup my radio partitions if someone needs help to fix their network issues or other possible solutions that could be found
REQUEST , WHAT YOU CAN DO TO HELP (needs root and busybox installed)
I suggest you make a backup of your EFS via TWRP & EFS TOOL before tinkering with hidden menu or anything at all. If you do these steps correctly, you do not risk of any damage to your device.
Download EFS Tool from here
http://forum.xda-developers.com/atta...6&d=1419867628
Main thread of it
http://forum.xda-developers.com/gala...546?styleid=18
1. go in backup tab
2. select all partitions
3. Select 3 partitions
backup modem, modemst1 and modemst2 and upload it for me so I can try to restore the settings to see if that works.
MAKE SURE YOU WRITE YOUR DEVICE MODEL when attaching those mentioned partitions AND DOUBLE CHECK IT AS FLASHING WRONG radios can permanently damage your device.
DEVICE I FIXED WAS D850 ATT Variant
HISTORY
hi there,
I am working to fix the problem many users have faced and therefore trying to find possible solutions. I need some partition images from you guys if you can provide me so I can try to fix the issues.
THE PROBLEM AND HOW IT STARTED :
I have got a D850 which I am using in Europe. The problem started when I inserted an LTE enabled sim and went to hidden menu to change my mode to LTE only, I was on Fulmics Rom 2.7 Lollipop at that time. Before that, ii network search, I could see all WCDMA, GSM and LTE bands used by different providers by manual search.
After changing it to LTE only, I could not see any signal bars and it started searching. As I was in an area where LTE signals were weak, so I thought maybe I need to change back to GSM/WCDMA/LTE from settings. Signals returned to normal but only to gsm. LTE and 3G were lost as searching for networks did not help at all.
I tinkered with hidden menu and selected GSM/WCDMA/LTE ( 3845#*850# ) from hidden menu
and
used this ( *#*#4636#*#* ) to change back to GSM/WCDMA/LTE from another hidden menu.
It didnot help.
I flashed different modems (one from kitkat and two versions from Lollipop) but that didnot help either.
I reverted back to KITKAT using TOT method and the WCDMA and LTE were lost forever when i tried to search manually. So I made an EFS backup and started tinkering with hidden method.
Actually I was not expecting that the values would be affected by using the hidden menu to fix my network to LTE only.
I then backup my EFS and tinkered with hidden menu and i was successful in bringing back LTE, however, I was stuck with no 3g.
Using build prop editor, I changed my operator from ATT to OPEN (as ATT does not show default selection menu for GSM/WCDMA/LTE in settings/ both hidden menus) which enabled the option by which I could changed my preferred network type.
In hidden menu, I just enabled VoLTE in LTE > Modem Settings > VoLTE On which brought back LTE.
Next I installed QPST & QXDM to check my NV values and IMEI.
All of those were perfectly fine. No problem at all.
Strangely all the NV values are right. I restored my EFS to old state where I didnot have LTE or 3g. The LTE was gone again.
I again enabled VoLTE from hidden menu and LTE came back.
See attached image for reference.
POSSIBLE SOLUTION :
I think the problem lies in ATT settings as it has preset operator settings which changes from GSM to WCDMA to LTE depending on its values.
Once I selected LTE only, I disabled the WCDMA and somehow broke the AT&T preset settings as you can not change preferred network from settings like D855 or other models. Somehow we need to re-enable these and one possible way would be to flash modemst 1 and modemst 2 from backup.
Please help me find the possible solution
PS : For all those who are wondering if i tried other sims and tried to use 4g/3g on another device. Yes i did and the problem is only in D850
I also made a proper working APN. Plus I check which network I am on by using *#*#4636#*#*
ANY SUGGESTIONS ?[/U][/COLOR][/B] @hyelton
Click to expand...
Click to collapse
from where did you got the qcn file

adil.ali.503 said:
from where did you got the qcn file
Click to expand...
Click to collapse
Google depending on your device model.
D850 qcn
D855 qcn download
Or something on the lines of above
I had two at&t g3. (Both lost their qcn) , one d855 and now I'm using third d850. ( I almost lost qcn on this one too)
I realise that qcn is easily lost on d850 model as even rooting via kingroot can simply damage qcn.
I had to sell all others. Previous models qcn didnt enable 4g for me , however, i flashed these to older device and 4g started to work. And i flashed older qcn to this device and 4g stopped working.
So make sure you find a qcn which enables 4g with 3g n 2g.
I would suggest go to a tech guy in your area who works with unlocking phones and they usually use some kind of boxes to flash qcn.
Another way could be you request a friend whose 4g is working to make a backup and share it with you.
Lastly, find it online and flash it yourself.
You can also request NV values which wouldnt change imei (as long as you change the NV 457 value to 0)
Inbox me for more help.
Good luck

My imei is already 0 and the model is d850 and body is of d855
The problem is that I can't use 3g on it
2g and 4g works fine
Sent from my LG-D850 using Tapatalk

adil.ali.503 said:
My imei is already 0 and the model is d850 and body is of d855
The problem is that I can't use 3g on it
2g and 4g works fine
Sent from my LG-D850 using Tapatalk
Click to expand...
Click to collapse
I came here out of curiosity. Next time quote me if you expect a reply.
What you need to do is flash a QCN. I can try to repair your imei number and send you back.
What I will need is your imei number(remove your battery and see under it), model number and your qcn file. Make sure you inbox me these details and I will try to repair it for you.
Good Luck

Hnk1 said:
I came here out of curiosity. Next time quote me if you expect a reply.
What you need to do is flash a QCN. I can try to repair your imei number and send you back.
What I will need is your imei number(remove your battery and see under it), model number and your qcn file. Make sure you inbox me these details and I will try to repair it for you.
Good Luck
Click to expand...
Click to collapse
As I told you that the body of the cell is from d855 and the sticker on the back is also false one with the imei of a d855
Sent from my LG-D850 using Tapatalk

adil.ali.503 said:
As I told you that the body of the cell is from d855 and the sticker on the back is also false one with the imei of a d855
Sent from my LG-D850 using Tapatalk
Click to expand...
Click to collapse
I can provide you with a qcn for device d850 but make sure you backup your own. Tell me if you would need it.
Also, the best thing would be that you send me your qcn and i try to repair it and send it to you back,
But i think the best thing could be to provide you with NV values. let me see if i can work something out.
QCN for d850
https://www.sendspace.com/file/ak2hkl

Hnk1 said:
I can provide you with a qcn for device d850 but make sure you backup your own. Tell me if you would need it.
Click to expand...
Click to collapse
Can you confirm that 2g,3g and 4g is working with that qcn
And a question for safety that what can happen at most if something goes wrong
Sent from my LG-D850 using Tapatalk

adil.ali.503 said:
Can you confirm that 2g,3g and 4g is working with that qcn
And a question for safety that what can happen at most if something goes wrong
Sent from my LG-D850 using Tapatalk
Click to expand...
Click to collapse
MAKE A BACKUP OF YOUR QCN. either using QPST or using TWRP (TWRP from xda as it can also backup EFS)
I flashed many and i had none problems. As long as you do have a backup to go back to. There is no problem.
PS : Share your qcn and maybe I can try to repair it. I got NV values from my device.
If your friend has the same device. Grab qcn from him too and we can work something out as well

Hnk1 said:
MAKE A BACKUP OF YOUR QCN. either using QPST or using TWRP (TWRP from xda as it can also backup EFS)
I flashed many and i had none problems. As long as you do have a backup to go back to. There is no problem.
PS : Share your qcn and maybe I can try to repair it. I got NV values from my device.
If your friend has the same device. Grab qcn from him too and we can work something out as well
Click to expand...
Click to collapse
I already have a backup of efs I made by twrp
Is it all I've to do?
Sent from my LG-D850 using Tapatalk

adil.ali.503 said:
I already have a backup of efs I made by twrp
Is it all I've to do?
Sent from my LG-D850 using Tapatalk
Click to expand...
Click to collapse
Although it is enough but i will go ahead and make a backup of qcn using qpst.

Hnk1 said:
Although it is enough but i will go ahead and make a backup of qcn using qpst.
Click to expand...
Click to collapse
I'm uploading my efs to Dropbox, I'll give you the link than
Can I just restore the efs files if you can provide me coz I don't want to mess with qpst
It's a bit difficult to me as I'm just a noob
Sent from my LG-D850 using Tapatalk

Hnk1 said:
Google depending on your device model.
D850 qcn
D855 qcn download
Or something on the lines of above
I had two at&t g3. (Both lost their qcn) , one d855 and now I'm using third d850. ( I almost lost qcn on this one too)
I realise that qcn is easily lost on d850 model as even rooting via kingroot can simply damage qcn.
I had to sell all others. Previous models qcn didnt enable 4g for me , however, i flashed these to older device and 4g started to work. And i flashed older qcn to this device and 4g stopped working.
So make sure you find a qcn which enables 4g with 3g n 2g.
I would suggest go to a tech guy in your area who works with unlocking phones and they usually use some kind of boxes to flash qcn.
Another way could be you request a friend whose 4g is working to make a backup and share it with you.
Lastly, find it online and flash it yourself.
You can also request NV values which wouldnt change imei
Inbox me for more help.
PS : i have come up with severe viral conjuctivitis so i might not be able to help you till it clears up.
Good luck
Click to expand...
Click to collapse
Hi I have a D855 LG G3 and I have the same exact problem, my 2G works perfectly fine but I am no longer able to access LTE or 3g (signal shuts down when I switch to 3g or LTE mode, Service is disabled).
My IMEI is fine and is not lost... I can see it in About screen, I have tried installing different lollipop modems and even downgraded to Lollipop and Kitkat rom and even tried Cyanogenmod 12.1, I never had the signal back on.
Can you please share the LG D855 QCN? I have no idea where to get it, googling has not gotten me anywhere, I saw a SINGLE site where I could download it but it had a password.

adil.ali.503 said:
I'm uploading my efs to Dropbox, I'll give you the link than
Can I just restore the efs files if you can provide me coz I don't want to mess with qpst
It's a bit difficult to me as I'm just a noob
Sent from my LG-D850 using Tapatalk
Click to expand...
Click to collapse
Well, i will tell you step by step how to make a backup of QCN and how to flash QCN. It will be fine.
How did you manage to back it up ?
Mate you sent me EFS which means I need to use it on my device and then fix it and then send you.
Can you manage a QCN ?
It is very easy. Let me get back to you by night but I WILL PREFER QCN
pjl3dm said:
Hi I have a D855 LG G3 and I have the same exact problem, my 2G works perfectly fine but I am no longer able to access LTE or 3g (signal shuts down when I switch to 3g or LTE mode, Service is disabled).
My IMEI is fine and is not lost... I can see it in About screen, I have tried installing different lollipop modems and even downgraded to Lollipop and Kitkat rom and even tried Cyanogenmod 12.1, I never had the signal back on.
Can you please share the LG D855 QCN? I have no idea where to get it, googling has not gotten me anywhere, I saw a SINGLE site where I could download it but it had a password.
Click to expand...
Click to collapse
Check your inbox. Tell me the result. And always remember : BACK UP BACK UP BACK UP FIRST

pjl3dm said:
Hi I have a D855 LG G3 and I have the same exact problem, my 2G works perfectly fine but I am no longer able to access LTE or 3g (signal shuts down when I switch to 3g or LTE mode, Service is disabled).
My IMEI is fine and is not lost... I can see it in About screen, I have tried installing different lollipop modems and even downgraded to Lollipop and Kitkat rom and even tried Cyanogenmod 12.1, I never had the signal back on.
Can you please share the LG D855 QCN? I have no idea where to get it, googling has not gotten me anywhere, I saw a SINGLE site where I could download it but it had a password.
Click to expand...
Click to collapse
Did you checked your hangouts
Sent from my LG-D850 using Tapatalk

adil.ali.503 said:
Did you checked your hangouts
Sent from my LG-D850 using Tapatalk
Click to expand...
Click to collapse
here you go.
Just run restore via twrp and your imei should be fixed. Good luck
I will appreciate if you tell me if it worked for you!

Hnk1 said:
here you go.
Just run restore via twrp and your imei should be fixed. Good luck
I will appreciate if you tell me if it worked for you!
Click to expand...
Click to collapse
Sorry to say it doesn't work
Imei is still 0 and I can't get any 3g signals
I think its the problem with the frequency band
Thanks for your help ?
Sent from my LG-D850 using Tapatalk

I'm still getting 4G LTE signals but it seems that I cannot get any data at all (any website can't load). Will this help solve it?

idoneapps.com Domestic Sim Unlock for SM-G900P (Review)

Hello this thread is my experience and review of idoneapps.com Sprint S5 domestic sim unlock.
REQUIREMENTS
-Running Lollipop or higher (I was on stock rooted 6.0.1)
-must be rooted
-Different carrier sim, for example I have At&t.
-Around $30, I know paid ughhh but honestly it's worth every penny.
Okay so here is my story that lead to this. I repair cellphones for a living and we do a lot of business with Verizon, well one of the workers offered me a Sprint S5 for $50. It was tempting as it was in great condition, the problem? I have AT&T. Anyways I bought the phone on impulse, as if I couldn't use it, I could still tweak and develop on it. So win/win for me.
Well after tons of research to domestically unlock the SM-G900P, I found idoneapps.
idoneapps have created an apk that will permanently sim unlock your Sprint and Boost mobile devices. (Check to see device compatibility on their website.)
Go to idoneapps.com
Go to Android unlocking services
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Then go to "Samsung Phone unlock for final user" and hit "download unlock apk"
Install the apk and open the app.
Now that the app is opened, you now have to buy your license, when you confirms your purchase, it will send a confirmation .zip to your email. Open that .zip and it will grant you the unlock permission.
Now go back to the unlock apk, and go ahead and hit the unlock button, the phone should reboot twice, the first time it reboots, go back into the app so it can reboot for the second time.
After that you should now be unlocked, if you are rooted, the app will automatically install APNs, but if not then you can go ahead and add your APN.
The app does other helpful things as well.
It debrands your phone as well. Getting rid of hands free activation.
CONS
Ahh there has to be a catch somewhere right?
Because the sprint S5 is a CDMA phone, it doesn't get all the benefits of a GSM carrier. The only downside that I have personally experienced is that I don't get 4G or LTE.
At&t is very strong in my area so I'm fine with just 3g. Also if you run a custom ROM with Xblast tools, you can throttle your 3g.
Anyways, it's great for unlocking your phone to use with At&t or T-Mobile.
http://uploads.tapatalk-cdn.com/20160625/dc1823c5dcfa737c87d2bfdf820983installation
Also you are free to flash as many custom/stock ROMs/recoveries as you like as its permanent. (Proof in screenshots as I'm now running CM13) There are ways to relock the device if you aren't careful, but that requires a special dialer code and or messing with service mode. But you have unlimited unlocks incase that ever happens.
Also for some reason it says disconnected for my network but I assure you that I get calling/data/texting, I believe that is from "tricking" the phone during the unlock installation.
Hopefully this guide helps someone else!
Sent from SM-G900Pkltespr

the unlock does indeed work on the g900p as ive unlocked 2 of them personally via idoneapps. I also only get the hspa connection, but that is very likely due to the LTE bands preselected on the phone. I have tried to do the stuff in this thread, but ive not got qpst to find the diag port on the g900p. Ive only half a$$ed in my attempts, so im not convinced that it cant be done, quite the opposite actually. Modder beware, if you brick your phone trying this, its not my fault, but its been said to work on many phones

youdoofus said:
the unlock does indeed work on the g900p as ive unlocked 2 of them personally via idoneapps. I also only get the hspa connection, but that is very likely due to the LTE bands preselected on the phone. I have tried to do the stuff in this thread, but ive not got qpst to find the diag port on the g900p. Ive only half a$$ed in my attempts, so im not convinced that it cant be done, quite the opposite actually. Modder beware, if you brick your phone trying this, its not my fault, but its been said to work on many phones
Click to expand...
Click to collapse
I actually managed to edit using qpst/qxdm and got those LTE values to stick after reboot. But with all my persistence, no LTE. I've done build.prop edits as well but soon learned that the firmware I'm on cannot edit GSM properties on build.prop. at least not for g900p
SM-900P CM13

youdoofus said:
the unlock does indeed work on the g900p as ive unlocked 2 of them personally via idoneapps. I also only get the hspa connection, but that is very likely due to the LTE bands preselected on the phone. I have tried to do the stuff in this thread, but ive not got qpst to find the diag port on the g900p. Ive only half a$$ed in my attempts, so im not convinced that it cant be done, quite the opposite actually. Modder beware, if you brick your phone trying this, its not my fault, but its been said to work on many phones
Click to expand...
Click to collapse
Also are you rooted? I can provide some information on how to connect to qpst. I had a really difficult time trying to get it to recognize my device. (Assuming you are on marshmallow)
SM-900P CM13

im very rooted LOL i rooted it 3 days after getting it, which was 7 days after release 2+ years ago. I wasnt too keen on MM, so im still using ol' reliable MOAR 7.0. And yeah, id appreciate the heads up on what part im missing!

youdoofus said:
im very rooted LOL i rooted it 3 days after getting it, which was 7 days after release 2+ years ago. I wasnt too keen on MM, so im still using ol' reliable MOAR 7.0. And yeah, id appreciate the heads up on what part im missing!
Click to expand...
Click to collapse
Well I'm not too sure if this is the right answer for you considering the software differences, I'm running windows 8 with Marshmallow based 6.0.1 CM13
What you'll need:
Terminal emulator
QXDM
QPST
EFS Professional
NV Calculator app
USB cable (no hub)
Patience
So I found it to be rather difficult to enable diag mode for the S5 with marshmallow as its so new that hardly anybody found a method to successfully activate it.
1. Turn on usb debugging in developer settings
2.Set USB to DM-Modem-Adb
-Open terminal app
Use the following commands
su
setprop sys.usb.config diag,acm,adb
Now verify w/ command
getprop sys.usb.config
It should tell you if the commands did indeed stick. (diag,acm,adb)
This method should install a driver if you are connected to a usb with debugging on.
METHOD 2
Plug in your phone to your pc and open EFS Professional and click on the Samsung Tools tab.
You then should see a pull down setting to change the usb mode to DM-MODEM-ADB. This method should automatically install a driver and enforce diag/adb server (if your diag driver hasn't yet been installed.) Which is where I had the most difficulty in getting it to connect to my PC. EFS needs to berunning and be ready/connected before you open QXDM.
3. Open QXDM (Run as administrator)
(DISCLAIMER! It's important to understand that you should run QXDM AFTER you successfully connected to DM-MODEM-ADB server in EFS Professional)
-In QXDM hit options > communication
You should see a COM port that is opened up and active. If this isn't working. Restart process 1/2 from complete scratch.
4. Click the target port pulldown menu in the communications window and select the COM channel that is displayed in PortType that is active. After hitting the "OK" button, close the window.
Now you should be able to read and write your nv memory.
5. Click View > Common > Nv browser.
Use NV calculator app for the bands you need. The phone itself only has 850-2100mhz through WCDMA.
I would advise to only edit 6828/6829. If it says you need to edit RF band config, in my version of QXDM reads 1877 as a CDMA property, not a GSM or WCDMA property. While messing with this I learned that it might possibly be something of unimportance to the mod, correct me if I'm wrong.
Try it at your own risk.
If you can't still connect to your pc, close all your programs. And start over every time it doesn't work.
Also I noticed that there is never an actual diag driver in device manager like there used to be in windows 7. Once in diag mode, device manager should recognize the device as COM. And possibly as a Modem as well.
Make the edits and reboot when you are done. Please report back with results as I have the exact phone and would like to see if it works to get a final answer if this can actually be done. Test around with your hiddenmenu and apns to see if you can get it.
If you have any questions, report back here so if there is a solution it can help others!
SM-900P CM13

Also check here
http://forum.xda-developers.com/showthread.php?t=2948822
SM-900P CM13

xholomovementx said:
well i'm not too sure if this is the right answer for you considering the software differences, i'm running windows 8 with marshmallow based 6.0.1 cm13
what you'll need:
Terminal emulator
qxdm
qpst
efs professional
nv calculator app
usb cable (no hub)
patience
so i found it to be rather difficult to enable diag mode for the s5 with marshmallow as its so new that hardly anybody found a method to successfully activate it.
1. Turn on usb debugging in developer settings
2.set usb to dm-modem-adb
-open terminal app
use the following commands
su
setprop sys.usb.config diag,acm,adb
now verify w/ command
getprop sys.usb.config
it should tell you if the commands did indeed stick. (diag,acm,adb)
this method should install a driver if you are connected to a usb with debugging on.
Method 2
plug in your phone to your pc and open efs professional and click on the samsung tools tab.
You then should see a pull down setting to change the usb mode to dm-modem-adb. This method should automatically install a driver and enforce diag/adb server (if your diag driver hasn't yet been installed.) which is where i had the most difficulty in getting it to connect to my pc. Efs needs to berunning and be ready/connected before you open qxdm.
3. Open qxdm (run as administrator)
(disclaimer! It's important to understand that you should run qxdm after you successfully connected to dm-modem-adb server in efs professional)
-in qxdm hit options > communication
you should see a com port that is opened up and active. If this isn't working. Restart process 1/2 from complete scratch.
4. Click the target port pulldown menu in the communications window and select the com channel that is displayed in porttype that is active. After hitting the "ok" button, close the window.
Now you should be able to read and write your nv memory.
5. Click view > common > nv browser.
Use nv calculator app for the bands you need. The phone itself only has 850-2100mhz through wcdma.
I would advise to only edit 6828/6829. If it says you need to edit rf band config, in my version of qxdm reads 1877 as a cdma property, not a gsm or wcdma property. While messing with this i learned that it might possibly be something of unimportance to the mod, correct me if i'm wrong.
Try it at your own risk.
If you can't still connect to your pc, close all your programs. And start over every time it doesn't work.
Also i noticed that there is never an actual diag driver in device manager like there used to be in windows 7. Once in diag mode, device manager should recognize the device as com. And possibly as a modem as well.
Make the edits and reboot when you are done. Please report back with results as i have the exact phone and would like to see if it works to get a final answer if this can actually be done. Test around with your hiddenmenu and apns to see if you can get it.
If you have any questions, report back here so if there is a solution it can help others!
Edit* make sure you connect the active state and that is reading your baseband under phone.
Sm-900p cm13
Click to expand...
Click to collapse
sm-900p cm13

Right on man! Thanks!! I'll have to give this a whirl later today. And as for the differences in Roms, I have zero issue flashing a ROM to get this working because it should stick once complete and I can then go back to moar if I want. Thanks again!
Sent from my SM-G900P using XDA Free mobile app

OK, so I tried several times and I can't get the diag port to show. Tried different modems and nothing. I flashed the modem with the idone unlock app but not with Odin. Might try that later. I know this is a few weeks back now, life got a tad hectic for me to spend much time on the computer and fiddling with odin

Thanks, this indeed worked. It's worth the money!!

I was able to unlock mines using the free version of idoneapps 3.1.8 (GTv3.1.8) just fine, however I haven't tested mines to see if it would work on AT&T. I just purchased an AT&T Service and will be getting my SIM card by mail in a few more days.
Does the free version of idoneapps 3.1.8 unlocks it domestically, or is it just an international unlock?

FNetV1 said:
I was able to unlock mines using the free version of idoneapps 3.1.8 (GTv3.1.8) just fine, however I haven't tested mines to see if it would work on AT&T. I just purchased an AT&T Service and will be getting my SIM card by mail in a few more days.
Does the free version of idoneapps 3.1.8 unlocks it domestically, or is it just an international unlock?
Click to expand...
Click to collapse
I have not tried it, but I have read that for domestic unlock to work, the steps are the same except that you also have to turn GCF settings off. It can be done by the IOTHiddenMenu. The steps are found here: https://idoneapps.com/settings.php. hopefully it works

FNetV1 said:
I was able to unlock mines using the free version of idoneapps 3.1.8 (GTv3.1.8) just fine, however I haven't tested mines to see if it would work on AT&T. I just purchased an AT&T Service and will be getting my SIM card by mail in a few more days.
Does the free version of idoneapps 3.1.8 unlocks it domestically, or is it just an international unlock?
Click to expand...
Click to collapse
This is a ridiculous question, but when I looked online and searched for the free version of idoneapps 3.1.8 and downloaded, the app I see doesn't have an obvious way to unlock the screen; this is what I see:
The only thing that's close is "SIM UICC Unlock." When I click on that it brings up a Network Unlock prompt. I downloaded the non-free one and it looks dead simple, but if there's a way to do it and save $35 I'm all for it
Did I download the wrong app?

For my Sprint Samsung Galaxy S5 (SM-G900P) there was an extra step that I needed to perform in order to unlock it for domestic usage according to: https://idoneapps.com/settings.php (Thanks @eurohunder for pointing this out for me). According to this quoted info, I am supposed to click on GCS settings on their paid for version of IDONEAPPS, but dont worry, I know that on the free version there is no such fancy button labeled "GCF", but fear no more! I will show you how to access the same exact menu where that fancy "GCF" button on the paid-for version leads to, its none other than simply clicking on the IOTHIDDENMENU button that I can see on your screenshot as button #2 on the bottom list, there you will see a series of menu, I believe the one labeled"Testmode" or something like that from the big menu leads you exactly to the same spot (which is the "SERVICE MODE") as if you were to click on the "GCF" button fron the paid for version, there you can just continue to follow the instructions on that page as it will be exact, depending on many factor and firmware version you are running.
Now that you have access the SERVICE MODE (or in other words "GCF"'s target destination if you were using the paid-for version) You would go to [2] UE Settings & Info, then [1] Settings, then [1] Protocol, then [4] GCF (note: MAYBE the "GCF" button on the paid for version leads you directly to this spot, bypassing the other menu options directly, maybe yes, maybe no, but it doesn't matter, the point is that you made it there), then finally you would tap "[1] GSM/(E)GPRS/WCDMA GCF ON", you will see a confirmation that the command succeeded, and as per the instructions from your own device you shall reboot your device using the power buttons and then tap on "restart/reboot". Thats all. At least in my case that should be it for unlocking GSM bands, according for further research I did, the Sprint Galaxy S5 would only work in 3G mode because all the 4G LTE GSM bands are blocked and the ones aren't compatible with the AT&T network (which is the network that I plan to use very soon on this device), so to fix that predicament because I dont want to be stuck on 3G mode I downloaded QPST and QXDM, I had to downgrade my firmware to kit-kat thorugh ODIN (was a b*tch sourcing the original .tar image on the internet, most servers that used to have it no longer had the file and when I was finally about to give up and pay sammobile their $15 to be able to download it from their servers at a speed greater than 15 kbps I finally found a server that was still hosting the NE5 firmware for free!)
For my particular device, beginning on Lollipop Samsung took measures (on the kernel) to prevent users from having access to QPST/QXDM, installing a customer kernel would have given access to QPST/QSDM without having to downgrade firmwares, but the custom kernel that I needed was nowhere to be found, so my only option was to do the firmware downgrade and thanks God that I didn't have the stock Marshmallow bootloader because downgrading would have been impossible then (Samsung implemented a downgrade check - blocker for the S5 starting on Marshmallow) so I was running the BO6 bootloader/baseband, the last ones of the safe bootloader version that allows downgrades.
So anyways, on QPST I made sure that all the 3G bands that I needed for AT&T were indeed enabled, and on QXDM I enabled all LTE bands (thanks to someone who posted the string value to enable all LTE bands for GSM).
So hopefully, when my AT&T SIM card arrives on Thursday Oct 26 not only should I have 3G access, but I also should have 4G LTE access as well, and after my AT&T SIM card arrives I would finally put all this to a test, how effective all this was and most importantly, if this method for domestic GSM unlock really works for me.

FNetV1 said:
For my Sprint Samsung Galaxy S5 (SM-G900P) there was an extra step that I needed to perform in order to unlock it for domestic usage according to: https://idoneapps.com/settings.php (Thanks @eurohunder for pointing this out for me). According to this quoted info, I am supposed to click on GCS settings on their paid for version of IDONEAPPS, but dont worry, I know that on the free version there is no such fancy button labeled "GCF", but fear no more! I will show you how to access the same exact menu where that fancy "GCF" button on the paid-for version leads to, its none other than simply clicking on the IOTHIDDENMENU button that I can see on your screenshot as button #2 on the bottom list, there you will see a series of menu, I believe the one labeled"Testmode" or something like that from the big menu leads you exactly to the same spot (which is the "SERVICE MODE") as if you were to click on the "GCF" button fron the paid for version, there you can just continue to follow the instructions on that page as it will be exact, depending on many factor and firmware version you are running.
Now that you have access the SERVICE MODE (or in other words "GCF"'s target destination if you were using the paid-for version) You would go to [2] UE Settings & Info, then [1] Settings, then [1] Protocol, then [4] GCF (note: MAYBE the "GCF" button on the paid for version leads you directly to this spot, bypassing the other menu options directly, maybe yes, maybe no, but it doesn't matter, the point is that you made it there), then finally you would tap "[1] GSM/(E)GPRS/WCDMA GCF ON", you will see a confirmation that the command succeeded, and as per the instructions from your own device you shall reboot your device using the power buttons and then tap on "restart/reboot". Thats all. At least in my case that should be it for unlocking GSM bands, according for further research I did, the Sprint Galaxy S5 would only work in 3G mode because all the 4G LTE GSM bands are blocked and the ones aren't compatible with the AT&T network (which is the network that I plan to use very soon on this device), so to fix that predicament because I dont want to be stuck on 3G mode I downloaded QPST and QXDM, I had to downgrade my firmware to kit-kat thorugh ODIN (was a b*tch sourcing the original .tar image on the internet, most servers that used to have it no longer had the file and when I was finally about to give up and pay sammobile their $15 to be able to download it from their servers at a speed greater than 15 kbps I finally found a server that was still hosting the NE5 firmware for free!)
For my particular device, beginning on Lollipop Samsung took measures (on the kernel) to prevent users from having access to QPST/QXDM, installing a customer kernel would have given access to QPST/QSDM without having to downgrade firmwares, but the custom kernel that I needed was nowhere to be found, so my only option was to do the firmware downgrade and thanks God that I didn't have the stock Marshmallow bootloader because downgrading would have been impossible then (Samsung implemented a downgrade check - blocker for the S5 starting on Marshmallow) so I was running the BO6 bootloader/baseband, the last ones of the safe bootloader version that allows downgrades.
So anyways, on QPST I made sure that all the 3G bands that I needed for AT&T were indeed enabled, and on QXDM I enabled all LTE bands (thanks to someone who posted the string value to enable all LTE bands for GSM).
So hopefully, when my AT&T SIM card arrives on Thursday Oct 26 not only should I have 3G access, but I also should have 4G LTE access as well, and after my AT&T SIM card arrives I would finally put all this to a test, how effective all this was and most importantly, if this method for domestic GSM unlock really works for me.
Click to expand...
Click to collapse
Thanks for taking the time to type all of this out...I didn't have any luck getting this to work with TMobile, but it's possible I screwed up something in the process before I made it to the GCF settings. I tried to set the towers to GSM and register the phone on T-Mobile's network, but it just wouldn't register, and I never could get the "invalid SIM" to go away. No big deal; I had a Moto E4 that I bought from Amazon, so I figured by the time I returned the Moto and paid for the $35 I might as well just use the Moto.

Do you have the .zip file he sent you?

Honestly...best damn unlock service ive ever used...and ive used alot but for samsung devices, and mainly sprint devices, its instant, theres a live chat, and if theyre unavailable on live chat, if you leave a message they get back to so fast...i will use them every single time i can.

I have done this on my Not4 using idoneapps, you do not need another carrier sim to domestic unlock... When it is unlocked, pop in a sim from another carrier and your all set to go.

i got mine unlocked thru Ebay for around $8, the seller used GT tools i believe and it is successful. By the way, did you guys update ROM after unlocking? if yes what custom rom did you update?

Is it possible to unlock more LTE bands?

Hello, everyone! I was hoping maybe you could give me your opinion on the following issue:
About a year ago I purchased a Moto X Play XT1562 in Europe with dual sim support (Asian ROM). I knew beforehand that I'd probably have limited LTE coverage in my country (Argentina), since the bands used by carriers here are B4 and B28, and XT1562 only supports B28 (which is used mostly for coverage in suburbs and rural areas). Band 4 is the main band used in Argentina for LTE coverage in cities and XT1563 is the model that supports it.
For quite some time I've had the theory that most phones should support more bands than they show, and that the differences between various models of the same phone are there to introduce region restrictions, which in turns means that some LTE bands are disabled and that it should be possible to somehow enable them by tweaking the software. For what I've read, there seems to be some support for my theory: there's a thread in this very same forum which claims that it should be possible to unlock all LTE bands in devices with Qualcomm processors by rooting the phone, installing a custom ROM and kernel and changing a few values.
LINK: https://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059
Now, I'd really want that to be the last thing I try. I've rooted my phone before and I even unrooted it by flashing stock ROM, so I know my way around, but flashing a custom ROM and kernel are things I'd rather not do right now.
So, that brings me to my second theory: since XT1562 and XT1563 are basically the same device, their hardware specifications are the same and only differ in the LTE bands they support... and since LTE bands seem to be software-restricted...
1) Could it be possible to unlock Band 4 by flashing XT1563 stock ROM to my XT1562 Moto X Play?
2) Has anyone tried to do that (even by mistake) without bricking the device?
3) If there's no option but to flash a custom ROM and kernel, does anyone know for sure if LTE bands in Moto X Play are software restricted? Or is there a hardware limitation?
Probably my secornd theory won't work because I don't think the solution would so simple, and there would be threads about it... but I guess I don't lose anything by asking
Thank you!! =)

Just realized this thread shouldn't go in General. Could someone please move it to Q&A? Thanks!

The frequency bands that your phone supports is region specific (as you guessed) and has legal implications. And just like your device IMEI, these values are found in the non-volatile memory of your phone. The values are basically on partitions that are much secure and not so easily editable (like by fastboot or recovery). But nevertheless, the values are "software" only, and so it must be possible to edit the values anyway (just like it is possible to edit the IMEI), one way of doing so is using Qualcomm software as in the link you had posted.
But this varies from device to device, vendor to vendor, so your second theory could actually work on our phones (really don't think so though).
While it might be possible to run ROMs for XT1563 on XT1562, the baseband/ modem for XT1563 would not work on XT1562; it would probably make your device show "unknown" for IMEI, and so you would get no SIM network. Flashing back the modem for XT1562 would probably fix it.
You could always try and find out...
You would need the NON-HLOS.bin and fsg.mbn files from the XT1563 stock image to try, and the same files from the XT1562 stock to revert back.
fastboot flash modem NON-HLOS.bin
fastboot erase modemst1
fastboot erase modemst2
fastboot flash fsg fsg.mbn
There's chance that you would be stuck with an "unknown" IMEI and then you would have to manually edit volatile memory values after all. This all is just theory, someone who has tried or someone who has more knowledge will be able to help you better.

DragonClawsAreSharp said:
The frequency bands that your phone supports is region specific (as you guessed) and has legal implications. And just like your device IMEI, these values are found in the non-volatile memory of your phone. The values are basically on partitions that are much secure and not so easily editable (like by fastboot or recovery). But nevertheless, the values are "software" only, and so it must be possible to edit the values anyway (just like it is possible to edit the IMEI), one way of doing so is using Qualcomm software as in the link you had posted.
But this varies from device to device, vendor to vendor, so your second theory could actually work on our phones (really don't think so though).
While it might be possible to run ROMs for XT1563 on XT1562, the baseband/ modem for XT1563 would not work on XT1562; it would probably make your device show "unknown" for IMEI, and so you would get no SIM network. Flashing back the modem for XT1562 would probably fix it.
You could always try and find out...
You would need the NON-HLOS.bin and fsg.mbn files from the XT1563 stock image to try, and the same files from the XT1562 stock to revert back.
fastboot flash modem NON-HLOS.bin
fastboot erase modemst1
fastboot erase modemst2
fastboot flash fsg fsg.mbn
There's chance that you would be stuck with an "unknown" IMEI and then you would have to manually edit volatile memory values after all. This all is just theory, someone who has tried or someone who has more knowledge will be able to help you better.
Click to expand...
Click to collapse
Thank you for your kind reply =)
So, if I understood correctly, there's no need to flash the full XT1563 stock image. I'd just have to flash those two files from XT1563 stock rom, and then if it doesn't work then I'd just flash the XT1562 files again, which I already have. Seems worth to try and with low risk of bricking my phone.
Now, if that doesn't work, then my only option would be to use the other method. I don't want to try that one yet because I don't have everything figured out: I'm stuck in step 6, "Open the USB settings screen on your phone." I haven't yet found the correct code to input in the phone's dial screen to edit USB settings. I think in Android 6 the USB options have all been moved to developer mode, but I'm not 100% sure yet.

floydian86 said:
Thank you for your kind reply =)
So, if I understood correctly, there's no need to flash the full XT1563 stock image. I'd just have to flash those two files from XT1563 stock rom, and then if it doesn't work then I'd just flash the XT1562 files again, which I already have. Seems worth to try and with low risk of bricking my phone.
Now, if that doesn't work, then my only option would be to use the other method. I don't want to try that one yet because I don't have everything figured out: I'm stuck in step 6, "Open the USB settings screen on your phone." I haven't yet found the correct code to input in the phone's dial screen to edit USB settings. I think in Android 6 the USB options have all been moved to developer mode, but I'm not 100% sure yet.
Click to expand...
Click to collapse
At step 6, you are basically trying to connect the phone to your PC in a vulnerable mode (Modem + Diag mode) so you could access the NV. On Moto phones this is not really possible by dialing a service code I think.
Did you try to boot your phone in BP tools (or QCOM?) mode from fastboot? Then connect to PC and it should be connected in diag mode (check in Device Manager to confirm). You might need some specific drivers, see last thread, or may be Google.
There is a lot of discussion about this on the internet (for other devices, mostly). Mostly because people with locked devices that work only on specific carriers use a similar edit of values in NV of the phone to get out unlocked.
I think you should Google and try out some of the things people have been suggesting.
Read here, post number 21, for example (the entire thread is pretty informative): https://forum.xda-developers.com/moto-x/moto-x-qa/unlock-lte-bands-moto-x-t2933475/
And here (for Moto X Play),
http://forum.xda-developers.com/moto-x-play/help/trouble-writing-nv-settings-moto-x-play-t3368261
Edit: Most of these NV and QPST threads do seem to repeatedly point out that writing on the NV is extremely risky.

DragonClawsAreSharp said:
At step 6, you are basically trying to connect the phone to your PC in a vulnerable mode (Modem + Diag mode) so you could access the NV. On Moto phones this is not really possible by dialing a service code I think.
Did you try to boot your phone in BP tools (or QCOM?) mode from fastboot? Then connect to PC and it should be connected in diag mode (check in Device Manager to confirm). You might need some specific drivers, see last thread, or may be Google.
There is a lot of discussion about this on the internet (for other devices, mostly). Mostly because people with locked devices that work only on specific carriers use a similar edit of values in NV of the phone to get out unlocked.
I think you should Google and try out some of the things people have been suggesting.
Read here, post number 21, for example (the entire thread is pretty informative): https://forum.xda-developers.com/moto-x/moto-x-qa/unlock-lte-bands-moto-x-t2933475/
And here (for Moto X Play),
http://forum.xda-developers.com/moto-x-play/help/trouble-writing-nv-settings-moto-x-play-t3368261
Edit: Most of these NV and QPST threads do seem to repeatedly point out that writing on the NV is extremely risky.
Click to expand...
Click to collapse
Thanks again!
So, I flashed the XT1563 modem files. It took me a while because when I unrooted my phone, I also locked the bootloader (I honestly don't know why I did it), so I had to unlock it again and of course make a back-up.
While at first it seemed that I'd be stuck with "unknown" IMEI just as you said, after a minute or so both sim cards started working. I still don't know if it worked, though, because I haven't yet seen the 4G sign on my phone, but I did notice a change: after flashing the files I started getting the H+ sign (H was the best I'd get before, both here and in Europe, even after flashing an XT1562 stock image). So, it wasn't a complete waste of time
It could be that LTE reception is just bad where I live, but I doubt it because other phones have 4G connection here. I'll see what happens tomorrow in another place, but but most likely I'll have to try with a custom image and kernel, so I'll take a look at the links you have provided.
EDIT: in Europe the best I'd get was 4G, of course. What I wanted to point out was that H was the best 3G connection I'd get anywhere.

floydian86 said:
Thanks again!
So, I flashed the XT1563 modem files. It took me a while because when I unrooted my phone, I also locked the bootloader (I honestly don't know why I did it), so I had to unlock it again and of course make a back-up.
While at first it seemed that I'd be stuck with "unknown" IMEI just as you said, after a minute or so both sim cards started working. I still don't know if it worked, though, because I haven't yet seen the 4G sign on my phone, but I did notice a change: after flashing the files I started getting the H+ sign (H was the best I'd get before, both here and in Europe, even after flashing an XT1562 stock image). So, it wasn't a complete waste of time
It could be that LTE reception is just bad where I live, but I doubt it because other phones have 4G connection here. I'll see what happens tomorrow in another place, but but most likely I'll have to try with a custom image and kernel, so I'll take a look at the links you have provided.
EDIT: in Europe the best I'd get was 4G, of course. What I wanted to point out was that H was the best 3G connection I'd get anywhere.
Click to expand...
Click to collapse
Dial *#*#4636#*#* (4636 stands for INFO) on dialer and you can select LTE only from network modes to force 4G detection. In this mode, it will pick 4G network (4G only, even if its weak), whenever it's available.
To really check supported bands by your phone, I think you would need to use the QPST app, it was possible earlier by *#*#SERVICE#*#*, the service menu. Maybe somewhere in *#*#2486#*#*?
Edit: I can think of two scenarios now. The sad one... while you flashed the XT1563 modem (that supports LTE Band 4, 8, etc. (values on the lower row, check attached), your NV still says it supports 19 and 8 and so on (not 4). This could mean you are now able to use only 8 (and the other common bands supported by the two variants) and neither of 19 or 4.
Or, Moto X Play decides which bands it supports depending only on the modem files, and you actually managed to get working LTE band 4 on your XT1562. .

DragonClawsAreSharp said:
Dial *#*#4636#*#* (4636 stands for INFO) on dialer and you can select LTE only from network modes to force 4G detection. In this mode, it will pick 4G network (4G only, even if its weak), whenever it's available.
To really check supported bands by your phone, I think you would need to use the QPST app, it was possible earlier by *#*#SERVICE#*#*, the service menu. Maybe somewhere in *#*#2486#*#*?
Edit: I can think of two scenarios now. The sad one... while you flashed the XT1563 modem (that supports LTE Band 4, 8, etc. (values on the lower row, check attached), your NV still says it supports 19 and 8 and so on (not 4). This could mean you are now able to use only 8 (and the other common bands supported by the two variants) and neither of 19 or 4.
Or, Moto X Play decides which bands it supports depending only on the modem files, and you actually managed to get working LTE band 4 on your XT1562. .
Click to expand...
Click to collapse
I did try to select LTE only, but it didn't work.
I also tried using service menu, but I didn't find any of the tests to be useful to check which LTE bands are supported.
About the scenarios you propose, I also thought maybe all I achieved was to restrict LTE bands to the ones supported by both models :S. At work my phone picks band 28, but both models support it, so there's no way to check it by discarding...
There's a third possibility, though, which is that both models' modems are exactly the same and bands are only limited by NV.
After work I'll see which custom roms and kernels are there for X Play and start studying the process to edit NV. Still it might not be possible to do so because the post claims that rom and kernels must be compiled from source code, so the ones made from stock won't work... That means I depend on there someone making a rom and kernels that meet those requirements.
In the second link, the person says he can't save the changes he makes to the NV, which is what is supposed to happen if you're using stock rom and kernel, according the link I've shared.

So, I ended up editing the NV in order to remove Band 4 restriction. It took me a while because I had to figure out how to bypass all the obstacles I found on the way but, once everything was set up, the process was quite simple.
I had to boot my phone in BP Tools mode and configure the QC Diag port driver correctly. Also, I had to use a newer version of QPST because the one I donwloaded first didn't work.
The tutorial claims that your phone must be rooted and that you need a custom rom and kernel in order to avoid the "anti-tamper" mechanisms in newer Qualcomm devices. My first approach was not to do such things (i.e.: unrooted phone with stock rom and kernel).
I edited the NV values as suggested in order to enable Band 4. The good news are that the custom values that I added didn't revert back to the original ones after I rebooted and also that I didn't brick my phone and it's working properly
Right after I rebooted my phone, it picked 4G signal, but after just a few seconds it switched to H. I forced my device to LTE only, and it connected to 4G, but then again it completely lost signal. My phone does pick LTE Band 28 sometimes, but not at my place, so I thought that I must have been picking up Band 4 (I tried to leave it set to LTE only, but it picked no signal at all).
Also, when I'm at work, it sometimes picks Band 28, but signal must be very weak because it never lasts more than a few minutes, after which goes back to H.
So far I'm not sure if the mod worked because I can't find a way to see which bands my phone currently supports or which LTE band it's connected to. I tried an app called LTE Discovery, but it labels it as "unknown band" (I suspect that my phone needs to be rooted in order for that feature to work).
Right now, I'm thinking of three possible things that could have happened:
1) The mod worked and LTE signal is just very poor by my place.
2) It worked and it connected to Band 4 for a few seconds, but then the anti-tamper mechanism detected that situation and software-blocked it (without reverting NV changes I made). In this case, I'll have to flash a custom kernel and see what happens.
3) There's a hardware limitation after all, in which case there's nothing I can do (I don't think this is the case)
Right now I'm at work and my phone has been picking up 4G for over an hour already. Since it usually only lasts a few minutes (connected to Band 28), then I guess there are reasons to be optimistic that it worked after all and it is currently using Band 4.
If I succeed, I'll open a new thread with a tutorial for Moto X Play.

I'll keep updating my progress on the issue in order to leave a record of everything I tried. Also, it could be helpful to other people who are trying to do the same thing or maybe someone who has done this before will see this and point me in the right direction . Again, if I succeed I'll write a more detailed guide.
I can confirm that what I did so far didn't work, I've modified the necessary NV values and even flashed Squid kernel, but still no success: I'm definitely not picking Band 4 anywhere, only Band 28.
While flashing the custom kernel, I also wanted to use the opportunity to root my phone, but for some reason I soft-bricked it in the process, so I had to flash XT1562 stock rom again (with XT1563 modem). This reverted the NV values to the default ones, so I had to customize them again.
The user fffft says that custom rom and kernel are needed in order to avoid the anti-tamper code, but also that it is most likely in the kernel. I could try another kernel, maybe Phoenix, but if that doesn't work either, then we can confirm that the anti-tamper code is actually in stock rom.
This leaves three final possibilities to succeed in unlocking LTE Band 4:
_Flashing another custom kernel
_Flashing a custom rom
_Flashing the whole XT1563 stock rom, as I proposed at first, and see what happens. If this works, this should both set the NV values to enable XT1563 default LTE bands (which includes Band 4) and also set a different anti-tamper code, which should not bother. Worst case scenario I'll soft-brick my phone again and I'll have to flash XT1562 rom.

Daily update:
First thing I tried yesterday was what I wanted to do from the beginning, which is to flash the whole XT1563 rom on XT1562. Kids, don't try that at home! At first it looks like it's working and that the device is going to boot normally, but then it gets stuck in the apps configuration screen or after the boot animation.
The only thing left now was to try with a custom rom, so I flashed Cyanogenmod 13 and Squid kernel. This, however, brought other issues: for some reason, when booting the phone in BP tools mode or Qcom, the device's QC Diag Port isn't detected by PC. It seems to be something implied to happen with custom roms: https://forum.xda-developers.com/moto-g-2014/help/diagnostic-mode-moto-g-flashing-cm-12-1-t3254756
Has this happened to any of you? Is there a way around it?
I also found this: http://www.howardforums.com/showthread.php/1692461-HTC-Evo-and-Cyanogenmod-Diagnostic-mode
There they mention that changes should be made on stock image and just then install the custom rom. That would mean to flash stock image, then change the required NV values, and finally install the custom rom.
That makes some sense, but unless I can find a way to enable Diag mode on Cyanogenmod, this will be the last thing I try and if it doesn't work then I'll give up

floydian86 said:
Daily update:
First thing I tried yesterday was what I wanted to do from the beginning, which is to flash the whole XT1563 rom on XT1562. Kids, don't try that at home! At first it looks like it's working and that the device is going to boot normally, but then it gets stuck in the apps configuration screen or after the boot animation.
The only thing left now was to try with a custom rom, so I flashed Cyanogenmod 13 and Squid kernel. This, however, brought other issues: for some reason, when booting the phone in BP tools mode or Qcom, the device's QC Diag Port isn't detected by PC. It seems to be something implied to happen with custom roms: https://forum.xda-developers.com/moto-g-2014/help/diagnostic-mode-moto-g-flashing-cm-12-1-t3254756
Has this happened to any of you? Is there a way around it?
I also found this: http://www.howardforums.com/showthread.php/1692461-HTC-Evo-and-Cyanogenmod-Diagnostic-mode
There they mention that changes should be made on stock image and just then install the custom rom. That would mean to flash stock image, then change the required NV values, and finally install the custom rom.
That makes some sense, but unless I can find a way to enable Diag mode on Cyanogenmod, this will be the last thing I try and if it doesn't work then I'll give up
Click to expand...
Click to collapse
On step 14 of the first post you shared, it says you could check the active bands on your phone. Do you see something useful there?
AFAIK, once you successfully edit the NV Memory, the changes are there to stay, even if you reflash stock ROM.
I can confirm one thing. BP tools + stock ROM gives you diag mode, but that doesn't work on AOSP based ROMs. And it seems not even on CM based ROMs. However it should be easier to do it on custom ROMs, try enabling and looking into Developer Options. Or may be some service code in phone app?
https://forum.xda-developers.com/showthread.php?t=1626638
On my phone running an AOSP based ROM, I have files that indicate a possible diag mode at /system/sys/class/Android_USB. Need to dig in more.
If you are not able to get your phone connect in diag mode successfully, the route I would now suggest is this:
1. Flash stock ROM (for XT1562)
2. Flash custom kernel
3. Root the stock ROM (use Magisk)
4. Edit NV Values, make sure it is successfully done (step 14 on the first post you shared?).
5. Check if its working.
6. Format /system, /data, and cache partitions, and flash ROM. So your baseband files (and ofc NV memory) is not affected.
7. Try again.

DragonClawsAreSharp said:
On step 14 of the first post you shared, it says you could check the active bands on your phone. Do you see something useful there?
AFAIK, once you successfully edit the NV Memory, the changes are there to stay, even if you reflash stock ROM.
I can confirm one thing. BP tools + stock ROM gives you diag mode, but that doesn't work on AOSP based ROMs. And it seems not even on CM based ROMs. However it should be easier to do it on custom ROMs, try enabling and looking into Developer Options. Or may be some service code in phone app?
https://forum.xda-developers.com/showthread.php?t=1626638
On my phone running an AOSP based ROM, I have files that indicate a possible diag mode at /system/sys/class/Android_USB. Need to dig in more.
If you are not able to get your phone connect in diag mode successfully, the route I would now suggest is this:
1. Flash stock ROM (for XT1562)
2. Flash custom kernel
3. Root the stock ROM (use Magisk)
4. Edit NV Values, make sure it is successfully done (step 14 on the first post you shared?).
5. Check if its working.
6. Format /system, /data, and cache partitions, and flash ROM. So your baseband files (and ofc NV memory) is not affected.
7. Try again.
Click to expand...
Click to collapse
Thanks!
When I edited the NV, the changes were saved (I closed QPST and QXDM, then rebooted my phone and checked the values). However, when I flashed stock rom, the values reverted to the original ones. I also thought that shouldn't happen, but nevertheless it did :S
About getting Diag mode on custom roms, I took a quick look at developer options but I didn't see anything useful. I read a few posts that claim it can be done using a terminal emulator, so there has to be a way around it.
The steps you mention are the ones I had in mind, except for rooting. Do you think it's really necessary? (phone will be rooted after flashing custom rom, anyway).
I'll try it tonight and see what happens =)
EDIT 1: If I understood correctly, step 14 of the thread I've shared is only for 3G bands, so I don't need to change anything there. LTE bands NV's can only be seen and modified using QXDM and that's where I checked if the changes were saved. However, I have seen that there are a few holes in the tutorial, some of which I had to figure out myself. Maybe there's one extra step I'm missing on QPST? Step 24 seems to indicate otherwise.
EDIT 2: I've found this thread. It's about a Lenovo phone, but chances are they are the same: http://www.teamsuperluminal.org/forums/topic/open-diag-port-in-cm-12-1-for-qpst/
This is what it says: "To open the diag port, connect the phone to a PC and use ADB:
adb shell
su
setprop sys.usb.config diag,adb"

Changing the NV and then flashing custom ROM didn't work (I deleted system, data and cache before but still didn't work).
I tried enabling diag mode using ADB with the code I found but it didn't work. No diag port gets enabled.
I'm ready to give up. It seems it can't be done, at least not on X Play
Unless maybe someone know how to use diag mode on Moto X play running Cyanogenmod?

6T Modem?

Can someone upload the modemst1.bin and modemst2.bin from the OP6T to XDA?
I have an idea that I want to test. Since the OP6T has Band 13 active and the OP6 does not.
I want flash the modem from the 6T onto the 6, to see if indeed it will activate Band 13 on my OP6. Thanks!

Give these a try.

Thanks, I will report back if this enabled Band 13.

Gave it a shot, didn't work. I lost one of my IMEI # after the flash. Had to restore my backup. I'll keep checking for a way to activate it. The modem fuses for Band 13 my have been blown. If so I'll never get it going.

tech_head said:
Give these a try.
Click to expand...
Click to collapse
Hello what verison os was when you backup this ?

This might help...
Scotsman828 said:
Gave it a shot, didn't work. I lost one of my IMEI # after the flash. Had to restore my backup. I'll keep checking for a way to activate it. The modem fuses for Band 13 my have been blown. If so I'll never get it going.
Click to expand...
Click to collapse
I know a little work around for stock based roms let's u pick and choose your bands ... Start by downloading shortcutmaster lite n install it. Once in the app hit the menu top right and select App Explorer. Scroll down until u see an app called Rftoolkit Select that App and then choose Rftoolkit Band Selection a screen will pop up n u can choose what to enable. I haven't tested this very throughly but when I messed up my service the other day I went in there selected all GSM n LTE bands reset my phone and it was back to my CA style speeds