Looking for some US variant modem unlocking, there has been mild success in getting AWS on GSM, etc by flashing NVRAM, qcn backups. I'm requesting a full dump (minus rom, modem, other flashables), the .txt dump from NV-items reader_writer v1.0 and QCN files.
How to provide your NVRAM dump:
1) Download NV reader/writer HERE and install THESE drivers (normal Samsung USB drivers).
2) Dial *#7284# and select "Qualcomm USB Settings" then check "RMNET + DM + MODEM".
*If you are running a aosp rom (cm9,cm10,aokp etc) you can use the diag method described HERE
3) Create backup.
a) Click "port" in the top left and select your samsung serial port.
b) Make sure BOTH boxes in the top bar are checked.
c) Click "Connect" in the top bar.
d) Click "Read" in the top bar.
e) Click "Read" in the lower 'NV-items' section.
f) Save the .txt file, this is your backup
*The process will take 5-10min. The file size will be roughly 3mb and "inactive item" and "bad parameter" sections are normal.
*To restore click "Write" in the lower 'NV-items' section and navigate to your backup file.
4) Dial *#7284# and select "Qualcomm USB Settings" then check "MTP + ADB".
Video
Thank you <:GEEK:> for these instructions:
http://forum.xda-developers.com/showpost.php?p=29514032&postcount=1
I now see GSM networks on my GN2 and I'm prompted to insert a sim card. I'm showing success and need a nv-items dump with the method described above!
Thanks.
rockerrock said:
How to provide your NVRAM dump:
1) Download NV reader/writer HERE and install THESE drivers (normal Samsung USB drivers).
2) Dial *#7284# and select "Qualcomm USB Settings" then check "RMNET + DM + MODEM".
*If you are running a aosp rom (cm9,cm10,aokp etc) you can use the diag method described HERE
3) Create backup.
a) Click "port" in the top left and select your samsung serial port.
b) Make sure BOTH boxes in the top bar are checked.
c) Click "Connect" in the top bar.
d) Click "Read" in the top bar.
e) Click "Read" in the lower 'NV-items' section.
f) Save the .txt file, this is your backup
*The process will take 5-10min. The file size will be roughly 3mb and "inactive item" and "bad parameter" sections are normal.
*To restore click "Write" in the lower 'NV-items' section and navigate to your backup file.
4) Dial *#7284# and select "Qualcomm USB Settings" then check "MTP + ADB".
Video
Thank you <:GEEK:> for these instructions:
http://forum.xda-developers.com/showpost.php?p=29514032&postcount=1
Click to expand...
Click to collapse
On my i717 I get 2 options
UART:
1. Modem
2. PDA
USB:
1. Modem
2. PDA
There is no 'Qualcomm USB settings' option for me to select.
Related
If your IMEI is corrupted and/or shows 0s this could help you fix it. By using these steps you will not be able to change your IMEI to a different one than your original.
1.You need to be on stock ROM
2.Phone has to be rooted
3.Dial *#7284# on phone's keypad
4.Click Qualcomm USB Settings
5.Select RMNET + DM + MODEM and click ok
6.Download QPST and install it QPST
7.Connect T999 to Windows PC with USB cable (make sure you have all Samsung drivers installed and working)
8. In Windows open Device Manager, go to Ports (COM&LPT) and look up what port your T999 is using
9.Open QPST Configuration program
10.Click Add new port
11. Enter port (for example "COM6") from step 8 to boxes "Port" and "Port Label"
12.Open QPST RF NV Item Manager program
13.From top menu click on Settings then Comport
14. In Comport Configuration window click on drop down menu and select your port from Step 8 then click OK
15. In RF NV Item Manager click on Read Supported NV RF Items (first toolbar button or select it from File menu on the top)
16. Below on left side go to line number 550 and click on it
17. On the right side, check box "Hex" this will display 9 boxes below where you enter your IMEI
18. You enter it in pairs of 2 digits and backwards
Example:
your IMEI is 353024052511214
8 (this number is not part of your IMEI but has to be entered)
3a (first digit of your IMEI ,"a" has to be there also)
35
20
04 (this can be written as just 4 also)
25
15
21
41
19. Click Write NV button
20.You can reboot and disconnect your phone now.
21. On your phone's keypad dial *#7284# go to settings and check MTP + ADB to go back to original state.
Source of info above
How to fix "ERROR 16 - Switch ???" on gs3 flashed to boost mobile.
This is what I did. Hope it works for you
Might work in other cases.
Take battery out of flashed phone.
Connect Donor Phone
test donor phone and see if you can connect (make a test call, try to get onlne)
if not <contact boost mobile>
if it does, then connect it to pc and get PRL form it.
Load QPST, under Start Clients menu, select Service Programming.
Click Read from Phone and enter MSL (000000).
Then Save to file. This will save a .qcn and .rl0 file.
In QPST, under Start Clients menu, select RL Editor.
In RL Editor, load your .rl0 file. Go to File, Save As..., make sure type is *.prl and enter a file name. Save file.
Turn off Donor and remove battery
Connect Flashed Phone
What You Will Need
The DFS CDMA Tool
Your MSL number (Sprint) or SPC number (Verizon, this is usually "oooooo").
Obtaining your MSL/SPC number is as easy as calling up your carrier and asking for it. They will freely give it to you. Other options include using the MSL Finder app. If that does not work, you are probably on Jelly Bean, so you will need to make a quick call to your carrier.
Step 1: Enable Use of DFS CDMA Tool
The use of this tool requires a non-standard USB connection (i.e. Download Mode, or just DM).
Open the Dialer and type in ##DIAG# (##3424#).
Click on "Qualcomm USB Settings" and select "DM + Modem + ADB" then press "OK".
Plug your device into your PC and go to Device Manager.
Locate "SAMSUNG Mobile USB Serial Port" and remember the COM number (in this case, COM5).
Step 2: Load Device into DFS CDMA Tool
Open DFS CDMA Tool. If you are using the Demo version, there will be a small countdown and the app will launch.
In the upper left-hand corner, hit the "Ports" button and select the port you found in Device Manger.
Double-click the port, and double-click it on the bottom to load your device into the software.
Enter your MSL/SPC number where it says "SPC" and hit the blue arrow. You should see the log show "Device Unlocked".
Step 3: Write New PRL
Hit the programming tab, then the NAM sub tab.
On the right-side, load the PRL that you want, then hit "Write".
Disconnect your device, go back to Step 1 and put your device back to "MTP + ADB". Back out of the menu and reboot your device.
Confirming PRL Change
Go to Settings -> About Device -> Status. Scroll down to "PRL" and confirm that it has been changed.
Take battery out of flashed phone. Again
go to "boostmobile" and login/create your account.
goto update handset
enter info for another boost phone (not donor, not flashed phone)
turn on 2nd boost mobile phone
go through the steps and test it for connection (calls, internet)
turn off and take out battery.
goto update handset again
enter info for Donor Phone (not 2nd Boost phone, or Flashed Phone)
turn on Flashed phone
go through steps, reboot
nJoy.......
I need help after i flashed my phone and got it ready for use on metro pcs i lost my imei number. I 've gone thru some of the post here and done what they said but nothing worked. cause most said i needed to do something with the nv_data file and i don't have one at all so can anyone help me
any help at all anyone please.
Imei 0/12 solved!!!
kanosuki said:
any help at all anyone please.
Click to expand...
Click to collapse
I've found a thread with the answer:
1. Disconnect USB cable from phone.
2. Go to Menu->Settings->Applications->Development.
3. Turn on "USB Debugging" option.
4. When message is appear press "Yes".
5. Go to dial window.
6. Enter "*#7284#" number.
7. Set "USB" radio button to "Modem" value.
8. Close window.
9. Go to dial window.
10. Enter "*#9090#" number.
11. Set "Diag config" to "USB" value.
12. Restart phone.
13. Then download EFS Professinal from http://forum.xda-developers.com/show....php?t=1308546
14. Extract and open efs professional and click on Qualcomm NV Tools
15. You must see your device in "Available COM Ports"
16. Now click on "connect", it will show "SPC was accepted by the phone".
17. Now just see the "IMEI Repair"column, it will show blank or '0'.
18. Now type your IMEI number infront of "IMEI" and click "Write IMEI".
19. Thats it.
irwing69 said:
13. Then download EFS Professinal from http://forum.xda-developers.com/show....php?t=1308546
.
Click to expand...
Click to collapse
link is dead
EDIT: Already got help from someone here. Thanks! "Case is closed now".
Hello everyone,
unfortunately I bricked my Find 7a while trying to expand the 3GB internal storage with Chinese partition layout. And I don't know where it went wrong. :crying:
I already tried the Unbrick tool (Sahara) and restoring the old partition layout several times. And the partition layout recovery worked, but ColorOS says my NV partition is still invalid. It seems this partition got damaged and now my IMEI is gone and I can't use my mobile network anymore.
And sadly I figured out that the normal TWRP doesn't even show the NV/EFS partition to back (only modified TWRP do), so I don't have an backup of those partitions.
One last change would be to take an backup of another phone, anonymizing it by overwriting the IMEI and kindly sending me the copy.
If someone is willing to do so, I'd be very happy so I can reanimate my Find 7 .
I attached a tutorial:
1. Needed software:
Qualcomm QPST Diag drivers
Qualcomm QPST Tool
IMEI converter
Any hex editor, e.g. HxD Editor
2. Start phone in Diag Mode:
-Enable Developer Settings and then "USB-Debugging" on your device
Install the drivers. They are already signed, so no need to disable Windows signature check.
To enable the Diag Port, either under
a) ColorOS:
-Call *#801# and enable "Engineer Mode Toggle"
b) ADB and root access:
ADB commands:
-adb shell (only when accessing the phone with ADB from pc, not necessary when using TWRP adb terminal)
-su
-setprop sys.usb.config diag,adb
Now in the in the device manager you should see a "Qualcomm/Oppo HS-USB MSM Diagnostics 276C (COM y)" device
3. Backup the IMEI/Baseband infos:
Again, we have 2 alternative ways:
a) QFIL
Open QFIL: C:\Program Files (x86)\Qualcomm\QPST\bin\QFIL.exe.
Did QFIL already automatically recognize the Diag Port in the first row?
From the top menu "Tools" choose the entry "QNC Backup Restore". Backup the QNC
b) QPST
Open QPST Configuration: C:\Program Files (x86)\Qualcomm\QPST\bin\QPSTConfig.exe.
Under the tab "Ports" there should be the COM port from the device manager above.
If not, try "Add New Port" and untick “Show Serial and USB/QC Diagnostic ports only” and choose the right COM port and click OK.
If this doesn't help and no device shows up, add the COM-Port manually by typing the following:
Port: COMy (replace x with the number of what the device manager is showing you for the "Qualcomm/Oppo HS-USB MSM Diagnostics 276C (COM y)"
Label: You are free to name this port what you want
Then in QPST Configuation open the top menu entry "Start Clients" and then "Software Download". Select the port of the device in diagnostic mode and press OK.
Choose the “Backup” option tab, click browse, choose your destination and name of your QCN backup, choose the "QPST NV Memory Files (.qcn)" as “Save as type”, NOT the first option as (.xqcn).
Click “Start” and wait for it to finish. This will back up all your phones NV Items and save them to the QCN Backup File.
5. Anonymizing your IMEI:
Open the .qcn file with HEX editor.
Search for your IMEI in HEX format. To do so, use the IMEI converter, enter your IMEI.
[For your own verifcation: An IMEI in HEX always starts with "08" followed by your first IMEI number and an "A". So if you have IMEI 123456789012345 the HEX format would be 08 1A 32 54 76 98 10 32 54.]
Now search for the converted HEX string (or better search for the first four characters 08xA only). Keep in mind to set the search type to "HEX values" not "Text" or anything else.
Replace all numbers after “08” with dummy numbers, so the result will e.g. be: 08 1A 22 33 44 55 66 77 88. Please copy your chosen dummy HEX IMEI, so I know what I am searching for to insert my IMEI then.
Save the file (as another copy, don't replace your original file in ase you will need it some day)
6. Share the anonymized file with me over PN
I thank all of you for your help! :victory:
Hello, I am new here and I would like to know if it is possible that you could share the file that happened to you since I have the same problem after partitioning my cell phone Beforehand thank you very much Sorry for my bad English
hi. had same problem with imei missing in my phone after hard bricking it and partition all mess up but now I done reparing the partition, some error come up says nv partition error. then I find out the imei is missing. please send me the dummy imei to my email. hope I can have my phone back.
- [email protected]
This guide is similar to my Moto G5 Plus guide, but is a bit more complicated due to not having a signed image with the correct EFS items.
WARNING: These tools can easily brick your phone, use this entirely at your own risk. Only advanced users should attempt this.
Requirements
Moto E4 Qualcomm version (tested on Verizon XT1767, but should work on all)
QXDM software (specifically, EFS Explorer) and basic knowledge of how to use it
Steps
Ensure you have a working QXDM setup, you can follow this tutorial step 1, then from step 4 until step 9 only
Insert Freedom SIM, boot up phone and ensure it can connect properly
Shut down phone. Hold the volume up and down buttons at the same time while pressing power
Press volume down button until you get to the "BP TOOLS" item, tap the power button once on it
After the phone boots up, start up EFS Explorer from the QXDM suite, connect to the phone (it will show up as "MSM8917" under QPST Configuration). You can do this by selecting the phone from the QPST Configuration screen and going to the "Start Clients" menu item and choosing "EFS Explorer." Choose the same port on the next screen, leaving SPC code as is, and press OK. Refer to the linked tutorial above.
Navigate to nv -> item_files -> wcdma -> rrc. In this folder, right click in the file list on the right hand side, select "Copy Item File from PC" and select each of the files in the attached zip (wcdma_rrc_fast_return_to_lte_after_csfb_timer, wcdma_rrc_fast_return_to_lte_after_csfb, and rrc_b66_plmn_support) and press ok (do this one by one). Ensure "Overwrite Allowed" is selected.
Go to the phone menu -> reset phone. Then reboot your phone.
Proof
Note: If you remove the SIM card you may have to do this over again.
I have implemented this fix and it works great.
Just some tips to save others some time.
1. You do not need USB debugging/Developer options on or the Motorola USB drivers installed.
2. The archive in the linked QXDM/QPST tutorial is no longer available but someone reposted in the last few pages of that thread.
https://forum.xda-developers.com/showpost.php?p=73160851&postcount=1187
3. If using Windows 10 you must boot your phone into BP Tools mode before you connect to the PC. After connecting the phone under Device Manager you must go to View > Show hidden devices to see the Moto E4 appear 4 times under Other devices.
4. You must force install the HTC driver that came with the archive I talked about in step 2. However to do this you must disable signed driver enforcement in Windows 10. Unfortunately I could not disable this with the command line option so you have to do the following:
Click the Start Start menu and select Settings.
Click Update and Security.
Click on Recovery.
Click Restart now under Advanced Startup.
Click Troubleshoot.
Click Advanced options.
Click Startup Settings.
Click on Restart.
On the Startup Settings screen press 7 or F7 to disable driver signature enforcement.
5. Once Windows 10 boots up connect the phone that booted in BP Tools mode. Once you are in the Device Manager > Other devices you will update the driver of the 2nd instance of Moto E4 in the list of 4.
6. After installing the HTC driver you should see the HTC Modem appear under Modems in Device manager. Right click > Properties and get the COM port of the HTC modem to use with QPST.
Hope this helps someone.