Related
**BE VERY CAREFUL WITH THESE TOOLS. IT IS ENTIRELY POSSIBLE TO DO IRREPAIRABLE DAMAGE.**
Ripped from the Xperia ROM, these programs allow control over a number of settings in the device.
RegisterEditor should allow direct reading and writing of registers on the qualcomm msm72xx chipset, which will allow control over virtually every setting available, just need to determine addresses and potential values, etc
TBattery talks directly to the battery chipset, and returns values such as mAh capacity, battery temperature, current draw, percentage remaining, etc.
DbgTerm allows real time display of Debug Log on device.
DebugTool allows among other things redirecting of KITL output to USB. You can also configure the level of logging for the Debug Log and have it save the log to SD.
Save Kernel KITL Log to SD:
1.) Open DebugTool.exe, input value 43D in [5]DebugFlags, click menu -> write
2.) Shut Down with Power Button (long press), and start up
3.) Do actions you want to be logged (load program that fails, drivers, etc.)
4.) Plug phone into usb, connect w/activesync and copy off /Storage Card/HtcLog/*.txt
5.) Open DebugTool.exe, input value 0 in [5]DebugFlags, click menu -> write
FMTuner allows direct advanced control over the FM Radio chipset, among other things allows activation without headphones (although I don't see a way to route audio to the speaker)
Uni-AT allows issuing of AT commands to the ROM.
dump a raphael ROM and open up rilphone.dll in a hex editor, look for the strings like +CRING, @AGPSADDRESS, $HSUPA_STATUS, these are AT Commands that can be issued to the radio ROM, to query status and alter settings.
Query an existing setting like so:
AT+CRING?
AT$HSUPA_STATUS?
[email protected]?
Querying a command should give you some input as to the required format.
Change a setting like so:
AT+CRING=1
AT$HSUPA_STATUS=1
[email protected]=1
For a setting with multiple parameters, such as AT+HTCNV, set it like so: AT+HTCNV=param1,param2,param3
Useful AT Commands:
AT+RADIOVER : returns radio rom version
AT+HTCNV : returns +HTCNV: 1,10,8 - param1 = DTM support, 1/0, param2 = MCS support 8/10/12, param3 = HSDPA Category 6/8/12
AT+HTCENS : ENS support 1/0
Reserved for more stuff
WOW!!!!!!!!
this would get alot more views in the diamond section.... thanx for posting it still
Looks like most of these tools were posted in Diamond section already here: http://forum.xda-developers.com/showthread.php?t=416334&highlight=htc+debug+tools
However everyone seemed to miss the significance of RegisterEditor entirely, it's listed in the linked Wiki as a 'very basic registry editor' but it has nothing to do with the registry at all..
Anyway, this is a dup post. Doh! But these versions are newer, and i'll try to make it more useful by including more knowledge about the apps
Wow! Kudos for this! Amazing. Register Editor is very powerful. Gotta map this out
Interesting. I wonder if these tools could be useful in unlocking the FM radio on CDMA Touch Pros.
[Edit: I noticed that you specified these were for the 72XX chipset. Any idea what kind of compatibility they have with the 75XX?]
Not sure, worth a try since they are similar, the api might be the same. You should be able to try a read operation without harming anything..
FMTUner Tested on Raphael
I've tested FMtuner on Raphael CDMA but nothing happens, I mean, the tool works, but no frequency is detected.
Fabian
bedoig said:
Interesting. I wonder if these tools could be useful in unlocking the FM radio on CDMA Touch Pros.
[Edit: I noticed that you specified these were for the 72XX chipset. Any idea what kind of compatibility they have with the 75XX?]
Click to expand...
Click to collapse
there is CDMA debugtools set, grab it from any cdma beta rom (maybe posted on ppcgeeks, if not, i can upload it here), similar to gsm but for example the AT tool differs (UNI_AT will not work on CDMA) etc etc.
bump for adding new AT commands
Is there some documentation for tBattery explaining exactly what each reading is?
Also have a suggestion if possible that it include a time hack with each sampe it saves to the log instead of just a start and end time.
Thanks in advance.
cmonex said:
there is CDMA debugtools set, grab it from any cdma beta rom (maybe posted on ppcgeeks, if not, i can upload it here), similar to gsm but for example the AT tool differs (UNI_AT will not work on CDMA) etc etc.
Click to expand...
Click to collapse
Could you post the CDMA debugtools set?
Thankyou very much
someone asked me in PM today to post the tools, see attachment.
tbattery
how exactly do i install this program? do i just copy it to my SD card and open it from my phone? thanks in advance
yup, copy to eg SDcard to DebugTools folder and run the debugtool
my operator use huawei networks, and this system don't support MEID for EVDO registration.
i compare layes3 trace for both terminal, Sprint-Novatel-U727 and Sprint-HTC-Diamond-Touch.
and found problem in "Session Setup" phase.
when terminals send 1xEV Signaling Access Channel -- HardwareIDResponse:
Sprint-Novatel-U727 send hardware_id_type = 0x10000 + ESN - and network answer,
but Sprint-HTC-Diamond-Touch send hardware_id_type = 0xFFFF + MEID and network stop answer.
so, i think my operator don't support MEID, and need switch diamond from MEID to ESN.
i'm not programmer, but i looking for 7500 code, hdramp.c/hdramp.h
and found hdramp.session_info.session_hwid.type parameter
with HDRAMP_HARDWARE_ID_TYPE_ESN or HDRAMP_HARDWARE_ID_TYPE_MEID value.
i try sprint and telus radio, but always MEID.
also i use QXDM and set 1933 nv_hdramp_hardware_id_i parameter to 0x10000 (for ESN)
but always MEID in trace.
so, if anybody can do more, than looking for SPC, or change ESN/MEID and has any information - please help me.
i think need path firmware, it's easy at intel cpu, but for arm/qcom i haven't this skill, so, before try loking other way.
thanks.
bump
any update?
How do you do a layes3 trace ?
Does this help?
http://www.qualcomm.com/common/docu..._1xEV-DO_Session_Negotiation_Example_3-08.pdf
yes, i patch diamond phone firmware, and phone start working.
i write more detail at qmat support forum.
later i erase few memory in my diamond and wait jtag/jlink from ebay.
bump
Can you tell me how to do layer 3 trace? the pdf file in the previous messages does say the OUTPUT, but it doesn't say HOW the data was captured.
TIA
Data was captured via QXDM (Log view or, more usable, Filtered view), saved into .isf and parsed by the QCAT tool. Ask google for latest versions of this software.
BTW, you REALLY not need QCAT - the QXDM can give you same description of interesting packets (described in pdf (0x1077,0x1078,0x1079 etc.))
//WBR
Diamond meid solution
Hard SPL
Supercid
change radio to 1.0.0.8u
now you can ahnge scm to 2A or make meid 00000000000000 using dfs.
Hi folks,
I need to know what the "correct" values for the Internet Sharing registry keys look like, so I can write an app that fixes them for those of us who don't have it working. To do this, I'm asking if people can do some simple steps for me:
1) Install Webserver Native Access v0.5.3 on a dev-unlocked phone, if you don't already have it. If possibly, please use the AllCapabilities version but even the normal-capability version helps.
2) Run the app and use a browser on your PC to navigate to Registry, HKEY_LOCAL_MACHINE, SYSTEM\CurrentControlSet\services\ICSSVC (URL should look something like http://192.168.0.15:9000/Registry?hive=80000002&path=SYSTEM\CurrentControlSet\services\ICSSVC).
3) Click "Download this key and subkeys as .REG" and save the resulting file.
4) Post that file (in a .ZIP or as a .TXT) here, along with the following info:
4a) What phone model you have (if using a modified ROM, which ROM as well).
4b) What carrier (mobile operator) you have, and whether your phone was built for that carrier.
4c) What OS version you are running (exact build won't hurt but shouldn't matter).
4d) Whether the "Internet Sharing" feature currently works for you, and if not, what error you get.
Thank you so much! I'll post an example below.
By the way, I'm particularly interested in the following classes of phone:
* Everybody who can run the AllCapabilities version of the webserver.
* Anything on T-Mobile US that has working ICS. Since it seems to work only for TMo-branded phones, better still if your phone isn't a TMo model.
* Anybody who has working Internet Sharing on a different carrier than their phone was built for.
* Anybody who has it work on their home carrier but not on any others.
* Anybody for whom it does not work and never has.
* Anybody who has an open-market phone and Internet Sharing works on multiple networks for them
(I will add to this list if other classes of problem crop up and need to be fixed in a different way).
I should mention that there's no guarantee that the fix will be available for all phones, at least not until we interop-unlock them. It should be possible for any phone with IU, though, at a minimum.
Thanks for your help! (Seriously, I'll push Thanks for anybody who sends useful data *at least* until I get it working.) This could benefit a lot of us here; in theory, it might even allow us to get Internet Sharing working without it using tethered data limit too.
Example from my phone
Phone model: Samsung ATIV S (SGH-T899M), stock (but capability-unlocked and somewhat hacked) ROM
Carrier: T-Mobile US, but the phone was built for Telus in Canada even though it had no SIM lock.
OS version: WP8.0 GDR3 plus the pre-8.1 update (Samsung firmware slightly tweaked to reserve registry and filesystem writing).
Feature status: Internet Sharing feature does not work for me on this carrier, and never has. Error is:
Connection Not Shared
There's no cellular data connection to share right now. Check your cellular settings and signal, and try again.
Click to expand...
Click to collapse
(As a side note, that error message is a dirty lie.)
I'm very confused about this one topic.. Because i always share my internet connection without data plan since 8.0 & it works fine. Never disconnect.
Firstly i would like to know as what peoples want as refers this one.
Sorry for no helping points.
Wow, "THANKS" @djamol. Would it have been too bloody hard to follow the steps so you would have actually contributed something to this thread? If your Internet Sharing works, even though you don't have a tethering plan (I *VERY* strongly doubt it works if you don't even have a data plan; that makes no sense at all) then your configuration data would have been very valuable.
There are quite a few people who are either completely unable to use the Internet Sharing feature or for whom it would cost extra (even though, in some cases, it is *supposed* to be included in their plan). The goal is to help these people.
Phone model: Samsung ATIV Odyssey (SCH-I930), interop unlocked(thank you sir!!!)
Carrier:Verizon US
OS version: Dev Preview 8.1 Update 1(8.10.14147.180)
Feature Status: Working (Seems on other devices/earlier OS's I got a warning message about data usage but not now). Haven't tried on other carriers; first time used.
A little side note: Still had Internet Sharing enabled when I started the webserver app and got a strange IP or MAC address which when clicked on threw an error. Couldn't find the address on any devices connected to my wireless or on the router itself. Included screenshots...
Aw hell, that's an IPv6 address again. I really ought to fix the app for handling those. Thanks for the reminder...
Also, big thanks for the file! I'd like some more from different versions, just to get a feel for what's version-specific vs. different for reasons of working-or-not, but that was already helpful.
EDIT: Did you use the AllCapabilities version of the app? It looks like the standard version can't read one of the relevant registry keys, and sadly it's the one that is most useful.
GoodDayToDie said:
4) Post that file (in a .ZIP or as a .TXT) here, along with the following info:
4a) What phone model you have (if using a modified ROM, which ROM as well).
4b) What carrier (mobile operator) you have, and whether your phone was built for that carrier.
4c) What OS version you are running (exact build won't hurt but shouldn't matter).
4d) Whether the "Internet Sharing" feature currently works for you, and if not, what error you get.
Thank you so much! I'll post an example below.
By the way, I'm particularly interested in the following classes of phone:
* Everybody who can run the AllCapabilities version of the webserver.
* Anything on T-Mobile US that has working ICS. Since it seems to work only for TMo-branded phones, better still if your phone isn't a TMo model.
* Anybody who has working Internet Sharing on a different carrier than their phone was built for.
* Anybody who has it work on their home carrier but not on any others.
* Anybody for whom it does not work and never has.
* Anybody who has an open-market phone and Internet Sharing works on multiple networks for them
(I will add to this list if other classes of problem crop up and need to be fixed in a different way).
Click to expand...
Click to collapse
Hi,
4) Attached.
4a) Nokia Lumia 920 RM-821 on UK CV ROM, but originally phone came with Orange Poland ROM
4b) I'm on Orange too, though not in Poland nor in UK.
4c) Running WP8.1 Update 1 on Lumia Black firmware.
4d) Internet Sharing feature worked smoothly for me from the beginning on any rom i flashed and any firmware, so yes, it's working without any problems.
Hope this helps.
@GoodDayToDie
Guess I can help!
4a) T-Mobile Branded HTC 8X running WP 8.1 Developer Preview
4b) T-Mobile US. It was built for the carrier
4c) OS version 8.10.12400.899; Firmware 3030.0.34101.531
4d) Internet Sharing works great! Sometimes when I am roaming, I get a message saying I don't have a plan that supports Internet Sharing and that I need to purchase one.
Hope that helps!
GoodDayToDie said:
EDIT: Did you use the AllCapabilities version of the app? It looks like the standard version can't read one of the relevant registry keys, and sadly it's the one that is most useful.
Click to expand...
Click to collapse
Sorry, can't sideload AllCapabilities version and of course the Bootstrap app succeeds but AllCapabilitiesUnlock fails on this OS. I am currently trying to find you any other info via FS Access and came across this if it's of any use ???
Oh right, I meant to release an updated version of EnableAllSideloading for 8.1. Whoops, I should do that. If you want to help out with that (not really the right thread but oh well, it's sort of relevant), dropping the exported .REG for HKLM\SOFTWARE\Microsoft\SecurityManager will help a lot. Note that it will include a list, by GUID, of all the apps you've installed (but nothing much else of a potentially-sensitive nature).
The files you provided are interesting. I can't say I know what the value in the first one mean, but they do imply a Verizon-specific difference in the feature. The second you actually might not want to share; it has the (default?) configuration of the Internet Sharing network in it, including key material. The third isn't actually data by itself; it instead defines the schema for the HotSpot configuration file. This info is potentially useful (though I wasn't able to get a Configuration Service Provider to parse my HotSpot provxml when I tried, probably because I didn't have the requisite access) although the info is also available publicly online.
4) Posted rar file here. Though I get no value, using the webserver and snicklers registry tools. Shows error2 in webserver. Registry Tools doesn't show any error just shows "no value".
4a) Using a Samsung Ativ-S SGH-T899M running Wolf's Fake Rom
4b) Using it on Simple Mobile, bought it sim unlocked I think it used to say Telus before the fake rom.
4c) OS Version 8.10.12359.845
4d) Internet Sharing works fine after Wolf's Fake Rom.
Whaaaa? That's weird. Error 2 means FILE_NOT_FOUND, or, more precisely here, means the registry key wasn't found. If you go up a level (CurrentControlSet\Services) is there not any ICSSVC key? Can you maybe post the .REG for that entire key?
Samsung ATIV S Neo (SPH-I800) Stock Rom - Interop-Unlocked/All Capabilities
Sprint for Sprint
Window Phone 8.1 Update through DP: 8.10.14147.180
Internet Sharing doesn't work for me.....that might be because I haven't paid Sprint for it.
Error:
Connection Not Shared
There's no cellular data connection to share right now. Check your cellular settings and signal, and try again.
Also attached, what I think, is the text of the S printEntitlement dll. This may be only be relevant for sprint....
Blue_Frog was working on something regarding ICS here: http://forum.xda-developers.com/showpost.php?p=54704074&postcount=577
-tdecision10
Any movement with this?
-tdecision10
Was reading wolfs MBN Creator thread the other day and somebody mentioned a backup of the CSC being stored at C:\Windows\System32\CSC
It has to be blocking the internet sharing when the original CSC is run during a hard reset. However wolfs CSC has internet sharing working fine. Tested by me. Im using an ativ s t899m WP8.1 running wolfs fake rom.
Using the webserver I pulled the files from my phone. Using sam-tools I extracted his CSC file, not directly off phone just from the mbn file from his fake rom thread.
Don't have time to look them over but here they are.
Looked over files in my previous post.
The stock CSC has 5 different configurations, all from different carriers. Most of the files contain nothing related to internet sharing except the SS_xxx_CSC.xml file. This one contains a lot of registry edits that aren't included in the wolf csc. Some for accent colors, tile layout, etc. but there is a few registry edits that regulate internet sharing in there. This same file in wolf's csc contains a bunch of capability unlocks but nothing even close to the stock versions with all the reg edits for all sorts of different stuff.
It mentions a dll file named EAPSIMHSPlugin.dll that I wasn't able to find on my phone. Not that I don't think its there I just wasn't able to get to the directory from the webserver. Here is the path c:\Programs\HotspotHost\MSFT\EAPSIMHSPlugin.dll
Here are the 3 edits made that I think block internet sharing. They are in
HKLM\Software\Microsoft\Windows Phone\HotspotOffload
I have that directory in my phone and it includes the subdirectory Plugins and Parameters but neither include any keys within them.
Can someone test this edit and see if its gonna be this easy to turn off the internet sharing block.
HKLM\Software\Microsoft\Windows Phone\HotspotOffload\Plugins\MSFT\PluginRank
Change the 1 to 0
Ill attach a txt file of the entries I copied and pasted from the Telus CSC files that would have anything to do with internet sharing for all the reg edits made incase anybody wants to look.
Oddly enough, my phone doesn't have that key at all. It has the Plugins key, but no subkeys of it (and no values like the ones in the provxml you attached). Of course, that could be due to previous experiments that I've tried (though they didn't work). Similarly, it has the Parameters key but not the subkeys listed in the attached file.
Huh, I really thought we had something there.
Another difference is in the config file. Ill attach just them. Not sure where to go with the differences though. Not familiar with it.
Good afternoon everyone,
I picked up a Nokia Lumia 830 (RM-985) to use with T-Mobile. It's a good phone, but one of the reasons that I bought it was to play with the software on it.
My current challenge is to install and make functional the T-Mobile Wifi Calling feature.
I had a Lumia 925 before, but it's toast and gone now unfortunately, so I can't get any information from it.
I modified the registry using vcREG, changing /System/Platform/DeviceTargetingInfo/PhoneManufacturerModelName to RM_892_nam_tmous_201. My logic behind this was that possibly the app operated like the Insider Preview app, and allowed only phones with a certain list of names to download and set it up. This didn't work (surprise)
Doing some more research, it seems that one of the potential (and only) ways to get Wi-Fi calling would be to flash a custom T-Mobile ROM onto the phone because there are some things 'baked in" that allow it to work and function correctly. Outside of that, perhaps it's possible to root the phone and add those files and functionalities in the registry.
THE QUESTION
Where can I get a ROM that will help me achieve this, and is this possible at all?
I don't know about getting a ROM for it, though if you can download one of the TMoUS-specific ROMs you may be able to extract the required files out of the image. The app for WiFi calling is really not the important part; it's just a control interface that interacts with the system service that handles the driver that does WiFi calling. You need the driver/service binaries, the phone needs to trust them (accept their signatures and have them installed in the correct locations), and the relevant service registry keys need to be set.
I haven't done this yet myself, but it's something I want to test. I have a Lumia 1520, so anything I find will probably be workable for you too.
GoodDayToDie said:
I don't know about getting a ROM for it, though if you can download one of the TMoUS-specific ROMs you may be able to extract the required files out of the image. The app for WiFi calling is really not the important part; it's just a control interface that interacts with the system service that handles the driver that does WiFi calling. You need the driver/service binaries, the phone needs to trust them (accept their signatures and have them installed in the correct locations), and the relevant service registry keys need to be set.
I haven't done this yet myself, but it's something I want to test. I have a Lumia 1520, so anything I find will probably be workable for you too.
Click to expand...
Click to collapse
I have the TMOUS 925 FFU file. How do I get in there and where would I look?
I don't usually do anything with ROMs, so I'm not the ideal person to answer this, but I know there are tools to unpack FFUs or convert them to VHDs or something like that. You could also just try 7-Zip (get the latest build, pre-release if they have one); I vaguely remember hearing they were adding support for some ROM image format(s).
bahgelsson said:
I have the TMOUS 925 FFU file. How do I get in there and where would I look?
Click to expand...
Click to collapse
This thread here for browsing .FFU
http://forum.xda-developers.com/showthread.php?t=2066903
And some files from T-Mobile Lumia 635 to get you started...
Did you ever get to add Wifi Calling added to your phone
Where you able to get Wifi calling on your phone? If it was useful, how or where did you get the TMOUS 925 FFU file? What are the steps involved?
Hi all. Wanted to start a thread for US owners of the international version of this phone. Mines on order so trying to get some things moving before it arrives. My main objective is getting the Bands to align to T-mobile [bands n71 (600 MHz), 41 (2.5 GHz), n260 (39 GHz) and n261 (28 GHz) working for 5G and 66 and hopefully 71(not sure supported on any version but is on the 9860 with same chip set)]. Also to keep it easy to do updates (carrier updated would be awesome).
Anyone have any info on what they have or have not found with this devices in the US?
- A list of frequency bands shown on the device per CSC would be great. Hopefully someone can get screen shots from samsung info tool for differing csc's, more so using us CSC's.
Has anyone changed the CSC via odin or tried the f916u or f916u1 FW through a std/patched odin?
- If so did bands change to fit the CSC region?
Has anyone manually copied the CSC from a US FW set to the internationals system folder (Forced a CSC change)?
- Concerned this may not make all the changes needed to the CSC provisioning but won't know until tried.
Has any one tried to take a TWRP ROM or backup from the F916U/1 and install it? Anyone have one that I can try (less user partition)?
- Has anyone confirmed what bands are binding in the US and if the 5G TD-NR2500 (N41) band is connecting?
I've de-compiled close build dates of FW between the U1 and international and there are not a lot of differences. Most of which I could apply manually if needed via root but it is a lot of data to enter and not sure whats really needed, so looking at it a piece at a time. I do have a US csc set to force. I also pulled the PIT file for 512gb units. Hope these can be repacked into a custom ODIN package that does not need root but the later is all long pole stuff.
Anyhow just looking to see what others have done or know to save me some steps. The more I know going in the better I can piece this together and hopefully put something out that can just be flashed and stay consistent through later updates.
Thanks in advance to all who have info to share!
I will test to help this project out...I have a rooted n9860
dallen5 said:
I will test to help this project out...I have a rooted n9860
Click to expand...
Click to collapse
Great. I may have to do a bit more to get n9860 csc files but bare with me.
- What carrier do you use and where are you located?
- Can you give me a details/screen shot of your csc in about - software info - carrier config version (adjust for your android version)
- Use the app "samsung band selector" and give me a list (or screen shots) of the bands it shows available.
You can send it to me in a message to cut down noise but if an issue, here is fine.
Big THANKS!!
saridnour said:
Great. I may have to do a bit more to get n9860 csc files but bare with me.
- What carrier do you use and where are you located?
- Can you give me a details/screen shot of your csc in about - software info - carrier config version (adjust for your android version)
- Use the app "samsung band selector" and give me a list (or screen shots) of the bands it shows available.
You can send it to me in a message to cut down noise but if an issue, here is fine.
Big THANKS!!
Click to expand...
Click to collapse
I'm using T-Mobile and I'm from Mobile,Al
dallen5 said:
I'm using T-Mobile and I'm from Mobile,Al
Click to expand...
Click to collapse
Thanks! I should have been more specific with"Samsung band selector". In the spot of that last photo, select the three lines upper left and select "band selector". That should give you a long list of presently supported bands. Can you get me that list?
I am hoping changing the csc to TMO opens up more bands here in the us. I am still trying to get that csc set together for you and your note 20.
saridnour said:
Thanks! I should have been more specific with"Samsung band selector". In the spot of that last photo, select the three lines upper left and select "band selector". That should give you a long list of presently supported bands. Can you get me that list?
I am hoping changing the csc to TMO opens up more bands here in the us. I am still trying to get that csc set together for you and your note 20.
Click to expand...
Click to collapse
Great thanks! Will get you a TMB CSC to try and see if that changes your bands. Will send via msg vs posting here as don't want to put a file up for a non fold 2 device on this thread. Will be a few days as need find time to download, de-compile and build the update.
saridnour said:
Great thanks! Will get you a TMB CSC to try and see if that changes your bands. Will send via msg vs posting here as don't want to put a file up for a non fold 2 device on this thread. Will be a few days as need find time to download, de-compile and build the update.
Click to expand...
Click to collapse
Ok cool
Did you ever come up with anything?
Hey sorry for the delays. I have been going crazy with this thing but not as far along as I would like to be. Samsung has locked the modem down more so than I yhought would be the case. The quick test I was to have you run was to modify the csc and I am far past that already.
I can get full TMO CSC running. (voip and volte)
I can add US bands specifically 66 and 71 and verified them working (or others unverified) on LTE. Mine Mimics the f916u1 bands for LTE. (QXDM works)
I can get the mbn carrier software options in the service menu (using custom modem.img)
I can limit the 5g bands to n41 although I can not get 5g to really connect (it claims it does but its not). Believe its a anchor issue with nsa. Not sure sa works in my area.
Working:
- carrier_policy controlling band availability and some CA.
- NV band pref to set LTE/5G from whats provisioned.
- 41 CA aggregation.
- manual modem provisioning for carriers.
- Full CSC for US carriers including VOLTE and Wifi calling
- F9160 DUD1 modem modified FW.
Thing still blocked:
- bands n71 5g and n260/1 although I think the hardware is missing for later mmwave.
- 5g working.
- LTE+ carrier aggregation on more bands. I can get it working in some b41 locations but that's it. Needs more work.
- Get rid of the Chinese unlock warnings on boot.
- F916u modem FW
I do plan to do a write up on some of this and add my notes fr pthers to chime in on. Still banging my head on the wall as the 5g bands should be working per everything I have read. I should have full RAT and it still limits to the same nr5g bands. Think the 5g bands are hard coded or limited in the firmwares db or missing hw. The Mbn's seem to not pass crc so editing may not be an option and I so far can not find a way to disable the security checks (2 bit changes and mbn failed to load). I can get some mod to the modem but to much causes it to fail or not load the radio at all. Need get around that security.
-= Currently (but hopefully temporary) my modem is dead. I corrupted the IMEI/EFS and am now getting an IMEI Certi: Failed and network: Blocked status in the service menu. If anyone has info on this please let me know. This is NOT caused by any of the below. =-
Few things to change for US use. I am not going to do this as a step by step as many have posted the details of how to elsewhere. I am just putting the values up for you to use as you should have some understanding of what you are doing to make these mods.
Add US LTE bands:
You will use QPST and QXDN to access the NV setting on your phones modem. The older QXDM will allow most of the changes. The 74xxx items will need the later 4. QXDM or PCATA.
NV item: 06828 nv_lte_bc_config_type.lte_bc_config
DEC: 10000000010101000011110000000001011000011100001100011011110
Bands: B2 B3 B4 B5 B7 B8 B12 B13 B18 B19 B20 b25 B26 B28 B38 B39 B40 B41 B46 B48 B66 B71
Change to decimal vaue: 288971309735352542
OR
Change to: 576460752303423487 for all bands, then limit with "carrier_policy" or "preferred bands". This allows band selector or service menu options to add other bands as needed. But do limit bands as it speed up network connections and saves power.
Note: Read up on LTE bands and NV item 6828. Most tools stop at band 41 and the method to add values above 65 are limited as the binary converted to decimal is to large. Qualcomm changed a couple of band numbers that were not used to allow this.
band 50=66, 55=252, 56=255, 59=71
I assume this is for all modems but may be limited to the fold 2. If anyone wants to confirm on another device I will be happy to update this note.
NV65633 (LTE band pref) default values:
Uint64: 0x1E7FFFFDF3FFF Change to:0x0402A1E00B0E18DE dec:288971309735352542
NV73680 (LTE-U Band 65 to 256):
65_128: 0x000000000000004E bin out=1001110 Edit to: 0x0000000000000042
bin: 10000000010101000011110000000001011000011100001100011011110
129_192:0x0000000000000000 No change
193_256:0x4A00000000000000 Edit to: 193_256:0x0000000000000000
Add NR bands and limit to US bands.
Note: I have yet to get the bands to ADD but you can limit to band 41. Adding may not be possible at all BUT these are the settings that should work.
NV74087 (NR band pref):
bits_1_64 int64: default: 1099645845509= 1,3, 28, 41 Edit to: dec:1099511627776 = n41
bits_65_128 int64: default: 78, 79 Edit to: dec:64 bin:1000000 =n71
129_192:0 no change
193_256:0 no change
257_320:0 Edit to: dec:24 Bin: 11000 =n260,n261
NV74213 (NR NSA band pref):
bits_1_64 int64: default: 1099645845509= 1,3, 28, 41 Edit to: dec:1099511627776 = n41
bits_65_128 int64: default: 78, 79 Edit to: dec:64 bin:1000000 =n71
129_192:0 no change
193_256:0 no change
257_320:0 Edit to: dec:24 Bin: 11000 =n260,n261
US CSC's:
Once rooted you can flash the HOME csc from the f916u FW. This will give you full support for the US market. The home CS will not wipe your device as it does not contain the PIT. Also the other will fail to load.
Modem:
Magic iso can read your modem image file and allows edits. Editing mbn_sw.txt and adding the us carriers adds them to your mbn list in the service menu.
You can flash later f9160 modem files in QDIN to keep your modem up to date. I ran DUD1 with OS10 for instance with better signal quality.
Secret codes:
secret code: *#*#0808#*#* -set usb connection id- (USB mode RMNET + DM + MODEM +ADPL(5G)) or apx for QPST
secret code: *#*#27262826#*#* -Change CSC-
Secret code *#*#27663368378#*#* -Service menu-
Stock SM-F916u1 frequency bands:
2G GSM GSM850,GSM900,DCS1800,PCS1900
2G CDMA CDMA800,USPCS1900
3G UMTS B1(2100),B2(1900),B5(850),B8(900)
3G CDMA BC0(800),BC1(1900)
4G FDD LTE B2(1900),B3(1800),B4(AWS),B5(850),B7(2600),B8(900),B12(700),B13(700),B18(800),B19(800),B20(800),B26(850),B28(700),B66(AWS-3)
4G TDD LTE B38(2600),B39(1900),B40(2300),B41(2500),B46(5200),B48(3600)
More to come, hopefully.....
Curious if you have this file on hand. I have the Fold 2 and i managed to delete the mmwave off my phone. Using the QPST, i was able to get into the modem but the file nr_nsa_band_pref file is not present. is it possible for me to copy someone else with either a fold 2 or note 20 ultra 5g?
the nr_nsa_band_pref is just a preference list, it wont add bands sadly