Develop Bugs

[WIP] Unlocking Note 2 modem for GSM/AWS

This is NOT in relation to changing IMEI/ESN as that is ILLEGAL! This thread is about enabling our baseband/modems to operate on different frequencies/couriers.
Trying the VZW unlock thread first HERE
I'm flashing a VZW ROM right now to check APN menu, etc. Sprint even with hack doesn't show APN.
There are several threads on how to unlock Verizon/Tmobile/ATT modems to work on each other with varying levels of success. I feel that we have a iPhone 4s/5 like device that has the same chipset just different locks around the software to prevent unlocking. I was moved by the community's involvement in adding a SIM card slot to the Note 2 and want this mod to work on US couriers.
Basically put, I want to make any US variant S3/Note 2 an international version. The hardware is the same, it's the NVRAM/Firmware prohibiting us.
This is the SIM card mod for the SPR N2:
http://forum.xda-developers.com/showthread.php?t=1959005
Enabling AWS (T-Mobile) on ATT Note 2:
http://forum.xda-developers.com/showthread.php?p=35933247
Verizon S3 on T-Mobile:
http://forum.xda-developers.com/showthread.php?t=2013647
Verizon S3 on world GSM:
http://forum.xda-developers.com/showthread.php?t=1809314
The primary method of unlocking modem bands is flashing a QCN file that modifies NVRAM params. In the ATT T-Mobile thread the hack works by flashing over a ESN/IMEI stripped T-Mobile qcn backup file.
I tried following this process but was blocked by a "Roaming Lists could not be read" error at 16% when trying to backup my NVRAM using QPST. I attempted flashing the file anyway and received a "Could not Communicate in Diagnostic Mode" error. My modem then would not see any networks. I then flashed a ATT modem which bootlooped my device.
I feel the Roaming List could not be read is the main issue into how Sprint locked down this device for US GSM. In SIM tech, the courier provides a preferred list of up to 80 couriers the phone is to connect to first when roaming due to courier roaming agreements instead of the strongest signal first. As the Spr model uses a chip for a SIM it's possible that the "SIM" could not be read to provide roaming lists and GSM could be blacklisted in this chip as it is more sophisticated then a SIM smartcard. Now that I flashed a ATT modem I'm going to try to download the NVItems again using QPST.
I restored my TWRP backup and sideloaded a SPR modem, back at stock all working.
The alternative is to use the "IMEI/ESN" backup tool:
http://forum.xda-developers.com/showthread.php?t=1867442
I will continue experimenting and will report progress.
When writing back my NVRAM dump I get this list of readonly/locked items:
(NV Items http://forum.xda-developers.com/showthread.php?t=1954029)
Writing NV-items from a file:
Unsuccessfully written NV-items:
00000 (0x0000) - Password (16 digits) is required
0^"Electronic Serial Number"^"Security*"
00001 (0x0001) - Read only item
1^"Electronic Serial Number Checksum"^"Security*"
01943 (0x0797) - Password (16 digits) is required
797^"DCS TX Burst Ramp Down Index 11"^"GSM*"
05597 (0x15DD) - Read only item
05598 (0x15DE) - Read only item
These two are unknown but people get them when doing AWS unlocks:
http://forum.xda-developers.com/showpost.php?p=36078971&postcount=81
Found a AWS/ATT modified TXT file, I flashed it and reset
http://forum.xda-developers.com/showpost.php?p=36008901&postcount=49
Mobile networks show a previously unselectable item WCDMA only as selected which is not in the menu, the network status is unknown. I have a feeling the nv-item is trying to reference a menu item that is not in my ROM.
Next I'm going to ODIN the stock ATT rom over and see what happens.
FAIL! modem.bin won't flash.
Flashed Stock AIO modem+firmware+rom, etc odin to phone and flashed LJC modem manually. No data and was reporting WCDMA only from the last NV items hack. It seems NV-ITEMS are persistent across a complete and total stock restore+modem flash (twice) wipes and bricks. I restored my backup TXT for nv items and stock network has returned.
I'm flashing CM next for Sprint as it has "- Removed preset Network mode/selection (allows for more network modes)"
http://forum.xda-developers.com/showthread.php?t=2047667
Hopefully with the NV Items hack and a ROM without network modes locked w/ a SIM card board I should be gold.
Here is NV Items when flashing on stock ODIN:
Writing NV-items from a file:
Unsuccessfully written NV-items:
00000 (0x0000) - Password (16 digits) is required
00001 (0x0001) - Read only item
00005 (0x0005) - Command failed
00018 (0x0012) - Command failed
00031 (0x001F) - Command failed
00032 (0x0020) - Read only item
00033 (0x0021) - Read only item
00034 (0x0022) - Command failed
00035 (0x0023) - Command failed
00036 (0x0024) - Command failed
00037 (0x0025) - Read only item
00048 (0x0030) - Command failed
00049 (0x0031) - Command failed
00050 (0x0032) - Command failed
00176 (0x00B0) - Read only item
00177 (0x00B1) - Read only item
00178 (0x00B2) - Command failed
00209 (0x00D1) - Read only item
00210 (0x00D2) - Command failed
00211 (0x00D3) - Command failed
00212 (0x00D4) - Command failed
00213 (0x00D5) - Command failed
00215 (0x00D7) - Command failed
00258 (0x0102) - Command failed
00259 (0x0103) - Command failed
00260 (0x0104) - Command failed
00261 (0x0105) - Command failed
00262 (0x0106) - Read only item
00263 (0x0107) - Read only item
00264 (0x0108) - Read only item
00265 (0x0109) - Read only item
00266 (0x010A) - Read only item
00296 (0x0128) - Command failed
01943 (0x0797) - Password (16 digits) is required
05597 (0x15DD) - Read only item
05598 (0x15DE) - Read only item
Done.
1/10/13 6:17pm
http://forum.xda-developers.com/showthread.php?t=2016575
Trying new international ATT rom. CM10 didn't have what I needed for network selections.
I have successfully detected a GSM network type although it's going to need some work.. I got to go home and eat.
1/11/13 11:14am
Using the RF NV editor from QPST I can edit all NV-Items with no roaming lists error.

BY FOLLOWING THESE INSTRUCTIONS YOU ARE INTENTIONALLY BRICKING YOUR DEVICE. I HAVE TESTED RECOVERY BACK TO STOCK WITH A ODIN FLASH AND RESTORATION OF MY NV-ITEMS BACKUP. I TAKE NO RESPONSIBILITY FOR YOUR DEVICE AND THESE INSTRUCTIONS ARE PROVIDED AS-IS.
That being said I have ODIN flashshed ATT firmwares over, international firmwares over, changed numerous NVItems settings and have been successful in restoring my device to fully operational stock with working radio/service. At one point I had to go into download mode and odin TWRP and ADB sideload a modem due to a boot loop but I was still able to recover.
*DO NOT PROCEED UNLESS YOU ARE AWARE OF HOW TO UNBRICK YOUR DEVICE AND RESTORE IMEI/NV-ITEMS*
To enable USB file transfer at anytime dial *#7284# Qualcomm USB Settings and select MTP+ADB
Here is a howto/recap of what I have accomplished:
**YOU MUST BE ROOTED**
You need the SIM card board for this to work otherwise you are simply experimenting. Get one HERE
1. Get the Note 2 toolkit and drivers per your device HERE This is the easiest method of getting all required tools/software for a brick restore and other flashes.
2. Get the Samsung NV Items tool HERE
3. Get your MSL using the *root required* Get my MSL app HERE Write it down and keep it in a safe place!
4. Dial *#7284# go to Qualcomm USB Settings and select RNDIS+DM+MODEM
5. Plug or Replug your device and wait for drivers to install
6. Open Device Manager and expand Ports (COM & LPT) (windows xp/7/8), make a note of which COM SAMSUNG Mobile USB Serial Port (COM*) (If you do not see the port listed then you didn't install drivers, wait for driver install or you didn't enable Qualcomm diag properly)
7. Open NV-items_reader_writer.exe and select your COM* from Port: dropdown. Put your MSL # in where it says 000000. Make sure BOTH checkboxes are checked and click connect. Click Read. Should say in console "Log message: > SPC is correct. Phone unlocked".
If you get "Log message: > Phone does not accept SPC. SPC is not correct" then try 000000 as MSL
8. Click Read and wait 5-10 mins for your nvitems to be read. SAVE THE TEXT FILE somewhere where you won't loose it and MAKE A BACKUP. Email it to yourself and upload it to dropbox. If you loose this file then you could permabrick your device!
9. Download the AWS ATT NvItems unlock file HERE Click DOWNLOAD and save the txt file to your desktop or somewhere where you will remember.
10. Open or go to NV-items_reader_writer.exe. Do the connect, MSL, read and select com port if you closed the app. Click WRITE and select the text file you downloaded in step 9 "nv aftr qxdm removed imei.txt". After writing click on Mode and Reboot or simply reboot your phone.
At this point you are on a Sprint Rom/Kernel/Modem with a GSM compatible radio. Your Sprint software has no idea what is going on and most likely won't connect to GSM even with a SIM card inserted. If you go into Settings->Mobile networks you wont see options to set APN. This is because the Sprint ROM/Radio isn't setup to connect to GSM. Try THIS to "unlock" US GSM couriers on Sprint ROM
11. Flash this ATT ROM: (others may work, although you need a ROM with NO included Kernel/Modem)
HERE
This is the [ROM][4.1.2][XXDLL1] Asylum TJ v1ROM with no modem/kernel/etc. Wipe Dalvik, factory reset, cache. I also wiped system before installing but you may not need to.
12. Boot and verify the rom boots.
At this point you can experiment with the Mobile Networks settings and should see APN options. Change your Network mode and see if you can get any listings for "Network operators" when selecting manual. If you can see ATT/T-MOBILE then report your findings!
13. Next is to flash over a ATT modem/radio in TWRP. Download the modem HERE
THIS MODEM WILL CAUSE YOUR DEVICE TO BOOT LOOP. Although I found on my device it only rebooted every 5 mins or so.
14. After booting you should be able to see ATT/TMOBILE in your network operators settings. Make sure to play with Network mode. I don't have a SIM card and so my lockscreen said "Emergency Calls Only" and I couldn't get into the Mobile Networks menu as it told me to "Please insert SIM card"
At this step I'm fairly certian the GSM bands are unlocked as most people only see Emergency Calls Only when their device is not registered. Normally this is caused by invalid or unauthorized SIM/IMEI/APN settings on a normal GSM phone.
RECOVERY
1. Download Sprint firmware HERE
2. Extract the ZIP to your desktop so you have the "COMBINATION_L900VPLJ1_L900VPALJ1_CL265523_HWID04_HW-Rev0406_user_low_ship.tar.md5" file on your desktop
3. Go into download mode HOW TO
4. Open Odin from C:\Samsung Galaxy Note2 ToolKit\Odin3_v3.07.exe
5. Connect your device
6. Click PDA and select "COMBINATION_L900VPLJ1_L900VPALJ1_CL265523_HWID04_HW-Rev0406_user_low_ship.tar.md5"
It will check MD5 and it'll take a minute
7. Click Start and wait for your device to flash & reboot.
8. Dial *#7284# and go to Qualcomm USB Settings and select RNDIS+DM+MODEM.
9. Open NV-items_reader_writer.exe
10. Find your COM port from earlier in your device manager, same as last time
11. Connect, Read. IF YOU GET SPC ERROR TYPE YOUR MSL or TRY 000000
12. Click Write and select your NV-ITEMS BACKUP .txt FILE
13. After writing click on Mode and Reboot or simply reboot your phone.
14. Dial *#7284# Qualcomm USB Settings and select MTP+ADB
You should now have a fully operational Stock device.
To enable USB file transfer at anytime dial *#7284# Qualcomm USB Settings and select MTP+ADB
If you have issues past this point then you didn't follow instructions completely or you experienced something different then what I experienced. The most important step of unbricking is restoring your NV-ITEMS. Odin flashing of stock firmware/etc is normal procedures as per any unbrick. You are welcome to try modifying the ATT modem to not bootloop (most likely LTE issues as Sprint radio doesn't operate on ATT LTE frequencies) by following THIS post. You can also try the Sprint ROM/Modem by following the Verizon APN/Network hack HERE
Some roms won't let you do *#7284# for ADB/MTP. The way around this (if you need to transfer files and MTP isnt anabled) is to sideload files from TWRP or find the verizon method for dialer codes for Qualcomm USB settings menu. There was a dialer only instruction post but I can't find it now. If all else fails then simply ODIN to stock.

Impressive work you are attempting. It would def be cool to have the same radio functionality that Iphone 5 peeps have. I am on AT&T, but it would be cool to be able to load the CDMA and related stuff to a GSM phone as well. Good luck, I will be foloowing your thread, mostly out of curiosity.
Sent from my SAMSUNG-SGH-I317 using xda app-developers app

I can successfully see a ATT/T-Mobile GSM network type with the NV-Items hack. I need to do the sim card mod now. I'll order parts this weekend and until then there isn't too much I can do.

rockerrock said:
I can successfully see a ATT/T-Mobile GSM network type with the NV-Items hack. I need to do the sim card mod now. I'll order parts this weekend and until then there isn't too much I can do.
Click to expand...
Click to collapse
Great news! Excellent work by the way, would love to see this end up working!

I can now run a ATT flashed modem. When selecting Mobile Networks it tells me to insert a sim card. I'm getting reboots every 3-5 minutes but I think it's kernel related. The ROM is half the battle, ATT modem boot looped on SPR ROM. I should be able to connect to GSM once I do the SIM hack for proof of concept.
Recap:
NV-Items of the ATT to T-Mobile flashed (AWS/GSM unlock, use both ATT and Tmobile on ATT GN2)
Flashed ATT ROM
Failed flashing ATT Persues kernel (stuck at samsung logo)
Flashed Sprint Persues kernel
Flashed ATT modem
I desperately need the NV-ITEMS from an international phone in txt format.
http://forum.xda-developers.com/showthread.php?p=36559274

this may have nothing to do with what your doing but ill ask anyway I ported a verizon note 2 rom over to sprint galaxy note 2 and everything works but LTE is it possible to get it to work? Its the JellyBeans Rom in the sprint forum

From my understanding the customization of the chipset is in relation to LTE frequencies which are hawdware related. It's the same for the Nexus 4, it supports LTE unofficially on band 4 due to LG keeping in their Optimus LTE chip. Nexus 4 on LTE only works in certain areas in the country due to ATT only providing LTE band 4 in very limited areas.
I doubt I can "unlock" to the point where a Sprint/Verizon phone can see each other's LTE frequencies as LTE is a different chip in question (most frequently) as LTE courier customization is specific to the courier/device.
I may be wrong as it depends on the chip in question and how it's implemented. I need to find a photo of both Sprint/Verizon mainboards and compare. My work focuses on GSM/AWS bands for HSDPA+ and 3G as it is more likely to work as the chipset known supports these bands. Please feel free to post pics of the boards or chipset info and I'll look into it.

Due to my NV-Items trick I now can use QPST to dump a full nvitems+more. I cannot restore items though
When in GSM mode I'm getting an Emergency Calls Only/Enter SIM which means it should work with a SIM chip.
ATT modem + ATT/AWS nvitems unlock on ATT ROM; SPR Kernel.
Buying a cracked screen working ATT Note 2 sometime today for $325 for additional testing

rockerrock said:
Due to my NV-Items trick I now can use QPST to dump a full nvitems+more. I cannot restore items though
When in GSM mode I'm getting an Emergency Calls Only/Enter SIM which means it should work with a SIM chip.
ATT modem + ATT/AWS nvitems unlock on ATT ROM; SPR Kernel.
Buying a cracked screen working ATT Note 2 sometime today for $325 for additional testing
Click to expand...
Click to collapse
Seems like your making progress
Sent from my SPH-L900 using xda premium

I'm following your thread with a lot of enthusiasm.
Sent from SHV-E250/N7105 w/ SJKernel using XDA apps developers app premium.

Post #2 contains instructions.

I have just found a Verizon hack thread to get US GSM data/voice working without all this hacking. I'll try it out and report back
http://forum.xda-developers.com/showthread.php?t=2044449
Flashed Deodex Vzw ROM:
http://forum.xda-developers.com/showthread.php?t=2044351
Flashed APN editor:
http://forum.xda-developers.com/showthread.php?t=2044449
I can see verizon networks, no LTE. Trying GSM now.

Yeah, I really doubt you will get VZW LTE working as for one you will not Auth with their system. Second I am sure the transceiver in our version of the phone is not capable of that frequency on the LTE path.
-- "Sensorly or it didn't happen!"

digiblur said:
Yeah, I really doubt you will get VZW LTE working as for one you will not Auth with their system. Second I am sure the transceiver in our version of the phone is not capable of that frequency on the LTE path.
-- "Sensorly or it didn't happen!"
Click to expand...
Click to collapse
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.

rockerrock said:
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.
Click to expand...
Click to collapse
Side note... Altering an ESN isn't just caps illegal, it is caps/bold/underscored/red font illegal. A federal felony from what I've read.
Sent from my SPH-L900 using Tapatalk HD

Skripka said:
Side note... Altering an ESN isn't just caps illegal, it is caps/bold/underscored/red font illegal. A federal felony from what I've read.
Sent from my SPH-L900 using Tapatalk HD
Click to expand...
Click to collapse
Yup, modifying ESN has absolutely nothing to do with my research. My goal is to utilize a provider's SIM on GSM to connect to ATT/TMobile with stock IMEI/ESN. Verizon uses a SIM in their Note2/S3 in which if they accept your ESN/IMEI with their SIM is their discretion. ESN/IMEI, etc is stored in NV Items which is in the modem baseband, not the ASIC. Swapping SIM cards are perfectly legal so removal/replacement of the embedded SIM is legal. ESN/IMEI is like a car's VIN which is illegal to touch, SIM is more like a license plate on a car. I'm a firm believer in its your device do what you want but once you enable your modem to interact with the public infrastructure you are bound to it's rules, period.
On another note I have a ATT Note 2 now but I sold the Sprint Note 2 to get the Nexus 4. I can continue my research into GSM on my Sprint S3 and provide dumps for the ATT Note 2.
I'm fairly certain that I have accomplished a US GSM unlock on my Sprint Note 2 as it exhibits the same symptoms as a Unlocked phone without a SIM, Emergency Calls Only. However I do not see ATT/T-Mobile in my network operators menu which I'm sure the VZW APN hack will fix or it's because I don't have a SIM.
It's going to take someone with a Sprint S3/Note 2 with SIM mod and some tinkering around to get this to work. I'll get a SIM board for my S3 but it's going to take some time as I'm busy with work and my girlfriend. If anything was learned, it was that the S3/Note 2 is pretty much damn near unbrickable. I've flashed every firmware known to man, trashed my NV ITEMS, wiped my ESN/MSL and recovered to absolutely working activationable stock. Don't be afraid to experiment, just BACKUP and BACKUP your BACKUPS.

I am stuck at this step:
13. Next is to flash over a ATT modem/radio in TWRP. Download the modem HERE
THIS MODEM WILL CAUSE YOUR DEVICE TO BOOT LOOP. Although I found on my device it only rebooted every 5 mins or so.
It does cases boot loop, only it's not every 5 minutes, but instantenious, right after "Android is upgrading" Am i missing something?
Update: with ATT ROM, it does give me 2-3 minutes before reboot, however it won't see the Sprint SIM with ATT modem file. I've also tried few other modems from Verizon and some other GN2 carriers, same story. currently i have no SIM mode installed, but I think it should still see SPRINT chip/SIM because it is emmulating a LTE/GSM SIM. SIM manager says SIM state unknown.
Is this the same for you? how are you able to see the T-mobile and AT&T , if you can't get n to the mobile networks menu?

rockerrock said:
Agreed, my goal is to get HSDPA GSM data working on Sprint Note 2. Verizon allready has a method of unlocking http://forum.xda-developers.com/showthread.php?t=2044449. I do agree that it's impossible for LTE to work on any method as LTE chip is a whole different ballgame than what I'm attempting. It may be possible but someone would have to start by getting a VZW and SPR mainboard and comparing chips. Even if you somehow get the radio working you would might need to hack the ESN which is ILLEGAL, although VZW does use SIM cards..
However I can see VZW frequencies on my Note 2 right now. Alternating between EVDOa and eHRPD.
Click to expand...
Click to collapse
Seeing PCS and CLR VZW is easy. I don't think you will auth on ehrpd though.
Did you ever get past the failure to read roaming list issue. Was curious if you found a way to read the PRL from the Note2.
-- "Sensorly or it didn't happen!"

Let me know if you would like me to test your theory.
sent from my phone using rocket fuel

One V CDMA - Problem in enabling data connection

I am using a HTC One V CDMA (Virgin Mobile USA) in India on Reliance CDMA network. The phone was flashed to Reliance and everything is working fine ie I can make/receive calls/sms etc. 1x / EVDO credentials have already been written to the phone.
Now the issue is that I am not able to enable data or the data connection doesn't get enabled automatically. When I try to enable data it says "Disconnected because service is unavailable". But if I press the "Activate this device" button in the settings section, an activation screen 1..2..3 comes up, then wait for 3-4 sec, the 3G symbol gets displayed meaning its able to make a data connection. Now if I go back to the settings page and enable data it successfully connects, and I am able to access internet at EVDO speeds. But after some idle time, the data connection is automatically disconnected and to reconnect I need to repeat the above process. Even if I intentionally disconnect data and try to reconnect, it doesn't happen and I need to go through the "Activate this device" process.
I believe some sort of initialization is missing which is done during the "Activate this device" phase and hence I am able to connect. What could be the reason for this? Is it some setting/configuration that needs to be enabled?
Please pour your valuable tips to resolve this issue.
Thanks

Fixed the issue with auto connection of data, not sure what fixed it exactly, but here are the last changes that I made after which it started working.
You need to use the tool QPST (I used version 2.7.378, an older version didn't work) for this.
In the M.IP tab, disable all profiles except profile 1
Then edit profile 1 and make changes (check attachment)
Then in RmNet tab enable auto connect for device 0 and 1.
After that
PPP Config --> Um --> Enter user/pass as "net" (Req Pw enc should be unchecked)
PPP Config --> AN --> Enter the EVDO credentials given by the MEID registrar (Req Pw enc should be unchecked)
Please note that I got it working merely by trial and error and some of the above changes may not be required and I am not even sure why they are necessary , but with the above configuration I am able to enable data without any problem.

iamvarkey said:
Fixed the issue with auto connection of data, not sure what fixed it exactly, but here are the last changes that I made after which it started working.
You need to use the tool QPST (I used version 2.7.378, an older version didn't work) for this.
In the M.IP tab, disable all profiles except profile 1
Then edit profile 1 and make changes (check attachment)
Then in RmNet tab enable auto connect for device 0 and 1.
After that
PPP Config --> Um --> Enter user/pass as "net" (Req Pw enc should be unchecked)
PPP Config --> AN --> Enter the EVDO credentials given by the MEID registrar (Req Pw enc should be unchecked)
Please note that I got it working merely by trial and error and some of the above changes may not be required and I am not even sure why they are necessary , but with the above configuration I am able to enable data without any problem.
Click to expand...
Click to collapse
Thanks for the above method .. Did you use this method after loading the NVDump file given by the registrar ? ... ALso when i edit the UM and AM feilds and issue write to the phone its showing as the phone has a read only NV ITEMS.

yakaaithiri said:
Thanks for the above method .. Did you use this method after loading the NVDump file given by the registrar ? ... ALso when i edit the UM and AM feilds and issue write to the phone its showing as the phone has a read only NV ITEMS.
Click to expand...
Click to collapse
Well, I had loaded the NVDump earlier, but as I had mentioned it would connect first but if you disconnect or get disconnected it wouldn't reconnect.
Check if the SPC is correct, cause I never got any error like that.

iamvarkey said:
Well, I had loaded the NVDump earlier, but as I had mentioned it would connect first but if you disconnect or get disconnected it wouldn't reconnect.
Check if the SPC is correct, cause I never got any error like that.
Click to expand...
Click to collapse
OP, I am taking a HTC One V for my dad and plan to use it with reliance, could you please tell me what I need to do ?
I already unlocked and rooted the phone. Do I just walk into a reliance store or do something more on computer etc before going there ?

experx said:
OP, I am taking a HTC One V for my dad and plan to use it with reliance, could you please tell me what I need to do ?
I already unlocked and rooted the phone. Do I just walk into a reliance store or do something more on computer etc before going there ?
Click to expand...
Click to collapse
You are talking about Reliance CDMA right?
If yes you need to get the MEID registered, will cost you about Rs 500. Reliance store guys will not do it, have to get it done through some 3rd party provider.

It says Read only NV Items for me too

2kool2btrue said:
It says Read only NV Items for me too
Click to expand...
Click to collapse
That's fine. Its only for one particular NVITEM. Just ignore it.

Hello varkey bhai,
Please Help me with the problem.
1. my meid is registered with reliance.
2. my prl is 00005
3. i am using the handset since 10 months.
4. evdo is also activated on my number.
But i am just getting 1x speeds.
Only thing i feel, i am missing out is on the username,Password,NV file,akey etc.
I have not received the above details from my reigstrar
Can u please guide me how this can be done to start evdo speeds.
Thanks in advance

vakubhai said:
Only thing i feel, i am missing out is on the username,Password,NV file,akey etc.
I have not received the above details from my reigstrar
Click to expand...
Click to collapse
Without the correct EVDO credentials, you won't be able to get EVDO speeds. You need to check with your MEID registrar.
NV dump is not really required and the same can be configured manually if you have the credentials as I have described above. Since you are able to make and receive calls, it looks like the Akey is already set.

so that means if i dont get the credentials from the registrar EVDO can never be started on this handset??
iamvarkey said:
Without the correct EVDO credentials, you won't be able to get EVDO speeds. You need to check with your MEID registrar.
NV dump is not really required and the same can be configured manually if you have the credentials as I have described above. Since you are able to make and receive calls, it looks like the Akey is already set.
Click to expand...
Click to collapse

vakubhai said:
so that means if i dont get the credentials from the registrar EVDO can never be started on this handset??
Click to expand...
Click to collapse
You could check with some other person who does MEID registration, maybe they can retrieve the credentials. But without it, EVDO will not work.

i have an htc droid incredible and i am facing the same problem as mentioned above are the steps above same for my phone also

vikisharma said:
i have an htc droid incredible and i am facing the same problem as mentioned above are the steps above same for my phone also
Click to expand...
Click to collapse
Try it out. It should work.

NVITEM Dump file
iamvarkey said:
That's fine. Its only for one particular NVITEM. Just ignore it.
Click to expand...
Click to collapse
Hello iamvarkey,
i have a sprint htc one that i have flashed but still dont have signal for voice and data. will the nv dump file help resolve this issue and how can i get it.
thanks

jewelman said:
Hello iamvarkey,
i have a sprint htc one that i have flashed but still dont have signal for voice and data. will the nv dump file help resolve this issue and how can i get it.
thanks
Click to expand...
Click to collapse
Simply by loading the Reliance PRL file, you should have voice signal, if not you are doing something wrong.

iamvarkey said:
Simply by loading the Reliance PRL file, you should have voice signal, if not you are doing something wrong.
Click to expand...
Click to collapse
i had done that but didnt work. the phone was sent to me without activating it first with sprint, can this affect it

jewelman said:
i had done that but didnt work. the phone was sent to me without activating it first with sprint, can this affect it
Click to expand...
Click to collapse
I don't think that would be a problem.
Make sure you are using the right PRL file.

No above steps required.
You must have flashed NV Dump already.
Your phone must be activated via *228 already.
Just perform below mentioned steps :
1) Put your phone in Diag Mode by dialing ##3424#
2) Get HTC Diag Mode driver if you don't have it already
3) Download DFS Demo version from DFS Website
4) Connect your phone with DFS, send SPC
5) Now, go to Programming tab -> Data ->
6) Click Read
7) At PPP tab, write "net" (without quotes) to SIP NAI, UID, Pwd field.
Restart the device and here you go, your device would get connected to internet instantly.

keval32 said:
No above steps required.
You must have flashed NV Dump already.
Your phone must be activated via *228 already.
Just perform below mentioned steps :
1) Put your phone in Diag Mode by dialing ##3424#
2) Get HTC Diag Mode driver if you don't have it already
3) Download DFS Demo version from DFS Website
4) Connect your phone with DFS, send SPC
5) Now, go to Programming tab -> Data ->
6) Click Read
7) At PPP tab, write "net" (without quotes) to SIP NAI, UID, Pwd field.
Restart the device and here you go, your device would get connected to internet instantly.
Click to expand...
Click to collapse
Keval,
I recently bought a HTC One E8 and am using Reliance CDMA on Slot-1 and facing this issue.
Would the steps jotted by you help me?
Thanks,
Vinay

Sprint LG G6 (LS993) Dial Codes

I've been testing this phone for a while and it seems like a lot of the menus have been disabled. I'm creating a list of what works and what doesn't in these next few posts.
Note: I do not provide any support with the use of these codes. The thread is for documentation purposes.
What works:
5689#*993# (HiddenMenu) - Device Testing Menu
##27263# (##BRAND#) - Removes any carrier branding and redetects the carrier based on (NV registry/RUIM/SIM?).
Note: Useful if flashing to Boost Mobile or similar carrier.
##72786# (##?????#) - Resets provisioning and makes phone reactivate.
Useful if you are having network issues. Sprint recommends this if you ever change your services or phone number.
##72786# (##UPDATE#) - Updates cellular data profile and configures service. Also causes a firmware update check.
##786# (##RTN#) - Factory reset. Erases everything!!! RTN is short for return?
##3424# (##DIAG#) - Pulls up DIAG menu with option to enable or disable.
Selecting "Enable" allows Qualcomm Mode when the phone is set to "Charging mode" while ADB debugging is disabled.
##3282# (##DATA#) - Pulls up cellular data settings menu. You can view settings by choosing options and this also lets you adjust PRL settings with your MSL code.
##33284# (##DEBUG#) - Pulls up reception statistics, connectivity, and misc device information.
##564# (##LOG#) - System Error Log. Have options to clear or copy to storage. Viewing it will show Last kmsg, crash log, or ANR log.

Dial Codes That Don't Work
These are the dial codes that are not working on our model.
##PST#

Reserved
I've reserved this post for any comments I may have about the posts above.

Here is an updated list of what works.
What works:
##27263# Removes any branding (sprint) and resets phone to update branding. (useful if flashing to boost or other carrier) (##BRAND#) Reboots phone.
##72786# Resets provisioning and makes phone reactivate. Useful if you are having network issues. Sprint recommends this if you ever change your services or phone number. Reboots phone.
##873283# Updates data profile and configures service - Causes a firmware update check (##UPDATE#) Reboots phone.
##786# Factory reset. Erases everything!!! (##RTN#) Reboots phone.
##3424# Allows Qualcomm Mode while in Charging mode when ADB is disabled. (##DIAG#)
##3282# Data menu allows you to view and edit your provisioning setting if you have your MSL code (##DATA#)
##33284# Network debugging menu. Gives information about network status. ##DEBUG#

l33tlinuxh4x0r said:
Here is an updated list of what works.
Click to expand...
Click to collapse
Thanks, I'll update the op.

thals1992 said:
Thanks, I'll update the op.
Click to expand...
Click to collapse
There is a typo in the op. ##27269# (##BRAND#) should be ##27263# (##BRAND#)
---------- Post added at 09:14 AM ---------- Previous post was at 08:59 AM ----------
Just found another code. ##33284# ##DEBUG#

I'm finding that codes from the G2 that I have work.
https://forum.xda-developers.com/showthread.php?t=2523252

So I have been fooling around with the dialer codes and I still can't figure out how to change the apn settings.... Phone is UICC unlocked and I have my MSL.
Anything Suggestions?

##786# I did this and now my cellphone dont recogbize my sim card. What I need to do? please help

thals1992 said:
I've been testing this phone for a while and it seems like a lot of the menus have been disabled. I'm creating a list of what works and what doesn't in these next few posts.
What works:
##27263# (##BRAND#) - Removes any carrier branding and redetects the carrier based on (NV registry/RUIM/SIM?).
Note: Useful if flashing to Boost Mobile or similar carrier.
##72786# (##?????#) - Resets provisioning and makes phone reactivate.
Useful if you are having network issues. Sprint recommends this if you ever change your services or phone number.
##72786# (##UPDATE#) - Updates cellular data profile and configures service. Also causes a firmware update check.
##786# (##RTN#) - Factory reset. Erases everything!!! RTN is short for return?
##3424# (##DIAG#) - Pulls up DIAG menu with option to enable or disable.
Selecting "Enable" allows Qualcomm Mode when the phone is set to "Charging mode" while ADB debugging is disabled.
##3282# (##DATA#) - Pulls up cellular data settings menu. You can view settings by choosing options and this also lets you adjust PRL settings with your MSL code.
##33284# (##DEBUG#) - Pulls up reception statistics, connectivity, and misc device information.
##564# (##LOG#) - System Error Log. Have options to clear or copy to storage. Viewing it will show Last kmsg, crash log, or ANR log.
Click to expand...
Click to collapse
##72786# stands for ##SCRTN# which my best guess is sprint carrier return. or in other words carrier settings reset.

Now i got a sim crad invalid, cofiguration cellphone stuck (I can avoid pressa all buttons) and a message "power off device and inster the sim card that came with you phone, then restart"... and that is a problem, I'm not in USA ._.

MrManty said:
Now i got a sim crad invalid, cofiguration cellphone stuck (I can avoid pressa all buttons) and a message "power off device and inster the sim card that came with you phone, then restart"... and that is a problem, I'm not in USA ._.
Click to expand...
Click to collapse
Try taking out the sim card and booting up. Then reinsert the sim card and reboot.

5689#*993# - works for hidden menu
from this post: https://forum.xda-developers.com/showthread.php?t=2523252

does not work either... same issue sim cannot be detected. using volume up+volume down+power got passed configuring phone state.. now stuck with invalid sim even though phone is unlocked..

veshwar said:
does not work either... same issue sim cannot be detected. using volume up+volume down+power got passed configuring phone state.. now stuck with invalid sim even though phone is unlocked..
Click to expand...
Click to collapse
Did you solved it? same problem here!

If you have invalid sim on another carrier, try inserting the sprint sim and going to system update menu, then hit unlock uicc and it will reboot, then again go to system update and hit update profile then update prl. Then power off and insert the other sim and it should recognize it. Tell me if it works.
Sent from my LG-LS993 using XDA-Developers Legacy app

Dr-akbar said:
If you have invalid sim on another carrier, try inserting the sprint sim and going to system update menu, then hit unlock uicc and it will reboot, then again go to system update and hit update profile then update prl. Then power off and insert the other sim and it should recognize it. Tell me if it works.
Click to expand...
Click to collapse
Hey Guys..
My LG G6 of sprint is unlocked.. tested with att... call and text works fine.. but data does not.
I cannot edit or add APN as its grayed out in settings..
I tried ##DATA# and there it does not give me any option to edit delete or add ... just gives reset to default for APN Settings and nothing happens....
Please help

desmataks said:
Hey Guys..
My LG G6 of sprint is unlocked.. tested with att... call and text works fine.. but data does not.
I cannot edit or add APN as its grayed out in settings..
I tried ##DATA# and there it does not give me any option to edit delete or add ... just gives reset to default for APN Settings and nothing happens....
Please help
Click to expand...
Click to collapse
You have to get the UICC Profile Update from Sprint.... Call the International Team or chat with them online and ask to be UICC unlock, if asked why, you're about to travel abroad... This UICC Update might affect the Domestic Unlock. At one point my device was domestically unlock, but now it isn't. (Maybe because I did a hard reset.) **Never Reset After Unlock, I learned the hard way lol

Shortcut master lite works i had the same problem
---------- Post added at 12:58 AM ---------- Previous post was at 12:58 AM ----------
Find global settings and it will turn on data

Dr-akbar said:
If you have invalid sim on another carrier, try inserting the sprint sim and going to system update menu, then hit unlock uicc and it will reboot, then again go to system update and hit update profile then update prl. Then power off and insert the other sim and it should recognize it. Tell me if it works.
Sent from my LG-LS993 using XDA-Developers Legacy app
Click to expand...
Click to collapse
wtharden said:
You have to get the UICC Profile Update from Sprint.... Call the International Team or chat with them online and ask to be UICC unlock, if asked why, you're about to travel abroad... This UICC Update might affect the Domestic Unlock. At one point my device was domestically unlock, but now it isn't. (Maybe because I did a hard reset.) **Never Reset After Unlock, I learned the hard way lol
Click to expand...
Click to collapse
Thanks I got it unlocked finally again from sprint...
Other sims are working fine..
When I insert ATT sim card then if network mode is automatic then it shows 3G always and speed is too low tested with speedtest. If I change network mode to LTE-CDMA option then speed test is 4-5mbps but then calling does not work.. When i dial any no with LTE-CDMA mode then it says sim is not valid or there is no sim.
Will ATT not work fully with LTE on automatic mode on sprint LG G6?
Please help.
Thanks in advance.

How to enable Volte on Stock ROM - Help?

I spend days but cannot get volte provisioned on T-Mobile USA.
Things I've done so far
1. Volte Carrier check id already off via *#*#86583#*#*
2. Have temp root access but unable keep edited build.prop, reboot cause a restore of original build.prop, reference link here
3. Try QPST method from this thread and many similar ones, but PDC cannot recognize our phone even QPST see it fine and connected on a com port. Have to use su command "setprop sys.usb.config diag,adb " to make the connection.
Everyone have any ideas?

Your provider may need to enable it from their end as well.
At least that's what mine had to do before I could get VoLTE working.

IkkeZelf1000 said:
Your provider may need to enable it from their end as well.
At least that's what mine had to do before I could get VoLTE working.
Click to expand...
Click to collapse
That's not an option, T-Mobile and all US carriers will not do that, tried already.

It worked for my Familys Phone A2 Lite with Android 9 (don't trust Android 10 update many reports of bugs)
with *#*#86583#*#* then you see HD Symbol in right corner. Your Provider must support VoLTE also some Providers in my Country they only enabled it for certain mobile plan.

Unlock network bands, enable voLTE and 5G on nonsupported countries

Hi,
Other phone models can use EFS Tool, QPST tool to do all the mentioned tasks.
And some phones to do that requires rooting phone since they dont have Engineering mode, and some with Engineering mode support doesnt need rooting to use the mentioned tools for example OnePlus phone.
So my question, does LG phone also has this thing called Engineering mode? since LG wing is not supported for bootloader unlocking by LG yet.
Anyone has more experience with LG phone and perhaps the mentioned tool can shed some lights on the concern? Thanks.

Goid app. Well made

on LM-F100EMW,
1) use dialer code #*462633*#100#
2) go to Field Test > LTE Data Test > Tethering Mode, and select QMICM
3) go all the way back to first menu and go to SVC Menu> Port Check Test> Port Check Test and select enable
after that I am able to connect QPST. I used EFS explorer to fix CA-combos and carrier policy for my region/provider.
After doing your work, revert the changes to have a regular USB connection!!

for VOLTE first try to
1) make a new file or folder with name "enable_ue" (without quotes) on your phone's internal storage.
2) use dialer code #*462633*#100#
3) go to Field Test> Universal Enabler > Create New Config , enable VoLTE and confirm.
to add VOLTE indicator next to battery and signal strength on notification bar
1) use dialer code #*462633*#100#
2) go to Field Test > GPRI VoLTE/VoWiFi > IMS> select Sim Slot > Registration > VoLTE > and enable VoLTE Indication.
after all these
1) use dialer code #*462633*#100#
2) go to Field Test> IMS Settings> select Sim Slot > Test > Restart IMS process > select Yes
now you should have VoLTE enabled with notification bar indication

rigasLee said:
on LM-F100EMW,
1) use dialer code #*462633*#100#
2) go to Field Test > LTE Data Test > Tethering Mode, and select QMICM
3) go all the way back to first menu and go to SVC Menu> Port Check Test> Port Check Test and select enable
after that I am able to connect QPST. I used EFS explorer to fix CA-combos and carrier policy for my region/provider.
After doing your work, revert the changes to have a regular USB connection!!
Click to expand...
Click to collapse
rigasLee said:
on LM-F100EMW,
1) use dialer code #*462633*#100#
2) go to Field Test > LTE Data Test > Tethering Mode, and select QMICM
3) go all the way back to first menu and go to SVC Menu> Port Check Test> Port Check Test and select enable
after that I am able to connect QPST. I used EFS explorer to fix CA-combos and carrier policy for my region/provider.
After doing your work, revert the changes to have a regular USB connection!!
Click to expand...
Click to collapse
This is a good write up!Thanks for this!But,what modifications are you making in EFS Explorer to fix CA-combos and the carrier policies?I have a T-Mobile branded Wing,and I'm trying to enable VoLTE AND VoWifi for AT&T since this 3g shutdown went in effect?Mostly conerned with the VoLTE part because I can't make voice calls without it.Thanks for your help.

surgemanx said:
This is a good write up!Thanks for this!But,what modifications are you making in EFS Explorer to fix CA-combos and the carrier policies?I have a T-Mobile branded Wing,and I'm trying to enable VoLTE AND VoWifi for AT&T since this 3g shutdown went in effect?Mostly conerned with the VoLTE part because I can't make voice calls without it.Thanks for your help.
Click to expand...
Click to collapse
For volte i didnt change anything from EFS.
The changes i did in EFS was to add 5G for any carrier, because my carrier was not supported, and also to take the CA string from another phone's firmware, that my carrier has good support, and paste it where the outdated ca string was inside my wing's EFS.

rigasLee said:
For volte i didnt change anything from EFS.
The changes i did in EFS was to add 5G for any carrier, because my carrier was not supported, and also to take the CA string from another phone's firmware, that my carrier has good support, and paste it where the outdated ca string was inside my wing's EFS.
Click to expand...
Click to collapse
Okay thank!I've been trying to get this to work for 2 days now,and so far no go.I have even tried loading the mbn files with PDC and still no luck...

surgemanx said:
Okay thank!I've been trying to get this to work for 2 days now,and so far no go.I have even tried loading the mbn files with PDC and still no luck...
Click to expand...
Click to collapse
Try to extract and load .mbn file from T-mobile's firmware

rigasLee said:
Try to extract and load .mbn file from T-mobile's firmware
Click to expand...
Click to collapse
I'm on T-Mobile firmware,and I have tried and no go.If you extract modem_a or modem_b from the firmware it has all the carriers listed.

Hi. I have LG wing unlocked dual sim. But not getting volte. Tried the hidden menu option. It is showing in settings but looks ims not registered. Can you tell if you were able to get Volte on LG Wing without mbn loading. Also if mbn loading is needed, what is the process and where do you find the files for LG wing Malaysia carriers that I can use. I have another Samsung phone and that is fully volte supported. Can I copy something from it?

fuadhdmini said:
Hi,
Other phone models can use EFS Tool, QPST tool to do all the mentioned tasks.
And some phones to do that requires rooting phone since they dont have Engineering mode, and some with Engineering mode support doesnt need rooting to use the mentioned tools for example OnePlus phone.
So my question, does LG phone also has this thing called Engineering mode? since LG wing is not supported for bootloader unlocking by LG yet.
Anyone has more experience with LG phone and perhaps the mentioned tool can shed some lights on the concern? Thanks.
Click to expand...
Click to collapse
Were you able to get volte enabled on lg wing? I use this set in Malaysia.

rigasLee said:
for VOLTE first try to
1) make a new file or folder with name "enable_ue" (without quotes) on your phone's internal storage.
2) use dialer code #*462633*#100#
3) go to Field Test> Universal Enabler > Create New Config , enable VoLTE and confirm.
to add VOLTE indicator next to battery and signal strength on notification bar
1) use dialer code #*462633*#100#
2) go to Field Test > GPRI VoLTE/VoWiFi > IMS> select Sim Slot > Registration > VoLTE > and enable VoLTE Indication.
after all these
1) use dialer code #*462633*#100#
2) go to Field Test> IMS Settings> select Sim Slot > Test > Restart IMS process > select Yes
now you should have VoLTE enabled with notification bar indication
Click to expand...
Click to collapse
When i go to field test and click on ims settings it is showing not supported. I formated my phone and it became like this. Before formatting it used to work and I could see ims settings. My phone I bought from a shop and the shop keeper sent it rooted. Thatd when IMS settings were working..but after I did a reset saying not supported. How to bring it back?

surgemanx said:
This is a good write up!Thanks for this!But,what modifications are you making in EFS Explorer to fix CA-combos and the carrier policies?I have a T-Mobile branded Wing,and I'm trying to enable VoLTE AND VoWifi for AT&T since this 3g shutdown went in effect?Mostly conerned with the VoLTE part because I can't make voice calls without it.Thanks for your help.
Click to expand...
Click to collapse
Where are you located and what condition is your phone in? I've got an AT&T branded phone but I'm on TMO...maybe we can switch!

When I go to field menu in my Lg Wing, I go to IMS settings, it is completely blank. Someone please help me in registering the Volte in my Lg Wing. I am already rooted by able to patch the stock boot.img using magisk. My phone came with an unlocked bootloader and its the European firmware. I am trying to use this phone in Asia (Malaysia). Surprisingly, when I got the phone from the seller, it was not enabled volte but IMS settings in field menu would also show up (unlike now when I go there and it is blank), and also surprisingly, my volte worked also but by mistake I formatted my phone and after that it never worked. I then tried to flash the stock firmware and did root, installed voenabler but nothing seems to be helping.
I even tried loading mbn files of different carriers via PDC but no help. IMS settings always stay blank and volte doesn't get activated. Such a good phone but not able to work because my carrier here only supports volte.
If someone has an interest in helping, will be great.

How to edit CA String.

jazbaesu said:
When I go to field menu in my Lg Wing, I go to IMS settings, it is completely blank. Someone please help me in registering the Volte in my Lg Wing. I am already rooted by able to patch the stock boot.img using magisk. My phone came with an unlocked bootloader and its the European firmware. I am trying to use this phone in Asia (Malaysia). Surprisingly, when I got the phone from the seller, it was not enabled volte but IMS settings in field menu would also show up (unlike now when I go there and it is blank), and also surprisingly, my volte worked also but by mistake I formatted my phone and after that it never worked. I then tried to flash the stock firmware and did root, installed voenabler but nothing seems to be helping.
I even tried loading mbn files of different carriers via PDC but no help. IMS settings always stay blank and volte doesn't get activated. Such a good phone but not able to work because my carrier here only supports volte.
If someone has an interest in helping, will be great.
Click to expand...
Click to collapse
Lg g8x,g8,v60 Volte enable for all carriers, unlisted countries also
I will try to keep this post as small as possible. This will enable Volte for Phone ranging from Lg g8x, g8 and V60 without root or modifying the system files. Many have posted ways to get it, Iam only trying to help out the small bits missing...
forum.xda-developers.com

so i can just change my nt code to eu open with a korean firmware and volte and 5g starts working?