yashsingh1/xdaforums huggingface dataset:
[Verizon Samsung Galaxy S III] samsunggs3owner:
hidden menus on verizon gs3

Hey i'm not sure if guys are aware of this but doing the steps below will enable the hidden menus in the verizon gs3

Go to Phone Dialer and type *#22745927

Enable Hidden Menu

Go to Phone Dialer and type *#7284#

I tried to use this to enable the 3g/4g band like the att note 2 on tmobile but it didnt work. qpst didn't detect the phone.

There is a post on here to enable the ATT Samsung galaxy Note 2 on Tmobile with 3g/4g band. I had tried to see if I could use the same steps

Well i just hopes this information helps
[Verizon Samsung Galaxy S III] flipos12:
re: Help me with a tutorial please.

Can you please tell me how you do this. i woul love to ge it working like you have. thank you.
[Verizon Samsung Galaxy S III] Israelleite:
Which software do you guys use to change the NV ?

What about you guys give some kind of step by step?

Thanks in advance.

I found this thread: http://xdaforums.com/showthread.php?t=1804117
[Verizon Samsung Galaxy S III] ihadacatonce:
SCH-I747 successfully flashed to d2att without error

I know this is slightly off topic, as I'm assuming all this fancy dev-speak is focused on enabling data on a post-paid plan, but I'm on ATT prepaid and accidentally found an ATT stock-like ROM that made my VZW SGS3 capable of incoming/outgoing calls and text. gapps are functioning, and everything appears fine. I've turned it on/off and flashed between 2 ROMs including ParanoidAndroid 2.1 multiple times without ever losing my ATT connectivity.

WanamLite 1.3, available through ROM Toolbox Pro.

Can I get it back to stock VZW? no idea. don't care. If your only goal is staying on ATT without needing to reflash every few days, this is the golden ticket.
[Verizon Samsung Galaxy S III] Israelleite:
The question is, are you able to get UMTS-2 ?

http://en.wikipedia.org/wiki/UMTS_frequency_bands
[Verizon Samsung Galaxy S III] foil:
I wouldn't be so sure about that ;)

ps: Yes, this picture is Photoshopped; how else was I going to fit all of that **** into one screen and also on this forum? haha
[Verizon Samsung Galaxy S III] LLStarks:
Why can't we just use a modified QCN file? The AT&T Note 2 can have AWS enabled using one.
[Verizon Samsung Galaxy S III] bedwa:
I modified my backup by hex, but was not able to restore it for some reason. Therefore I'm not sure we can in that fashion. I wonder where the system keeps the nvbackup when you use the phone itself to backup the NV for imei purposes. The other thing I was trying with the sch-I535 I have was flashing the kddi modem, but it came up with the unapproved software screen and wouldn't boot, but it is a similar baseband.
[Verizon Samsung Galaxy S III] ac21365:
While I am the first one to appreciate another person's efforts, do you mind putting the AT&T sim card back in and take screenshots of when you are actually on the network. I myself have operated the Verizon GS3 on AT&T and T-Mobile, albeit only on EDGE.

Thanks
[Verizon Samsung Galaxy S III] mybook4:
Am I missing something? The radio being used is VRLG1 (i535), and the speeds are definitely edge (way less than a megabit).

How is this 3g?
[Verizon Samsung Galaxy S III] mybook4:
Opened all the verizon modems and one AT&T modem in a hex editor to poke around.

Some observations:

All the radios seem to start similarly and have similar structure (portions of data/code spaced by portions of 0s). It's quite spacious in there (and explains why the 60 MB modems zip up to 20 MB).

VRLG1:

0x4cd7c Mentions something about "Samsung Root CA cert" - This is most likely in all of the modems and is probably nothing, but I wanted to note it anyway.

VRLEC, VRLF2, and VRLG1 all appear to have a signature from 0x02984600 to 0x2984700 (256 bytes or 2048 bit). I recall from peeking inside the signed kernel parition mmcblk0p7, other partitions in the boot chain also have a 2048 bit signature. VRLG7's signature appears to be at 0x029b0600 - 0x29b0700 (again, appears to be a 2048 bit signature).

The AT&T UCLH9 modem appears to be similar in structure as the verizon ones. There does appear to be a signature in the AT&T modem at 0x02a18600. It appears to be structured as a signature, then a string of 00 01 FF FF(repeating), then some data at the end. I remembered this being similar to the way the vzw stock kernel is signed so I opened my backup LF2 kernel (from early July) and verified this to be true.

Ralekdev describes the algorithm (in C) for checking the signature of the kernel parition in this post of the bootloader unlock thread http://xdaforums.com/showpost.php?p=29227801&postcount=107

"The goal is to make it so that after all the calculations the 256 byte block located at img_sig_data+0x100 has the contents 0x00, 0x01, 0xFF * 236, and then the sha1 of our boot.img"

-I wonder if any of the kernel partition checking code was reused for the modem checking code?

-I know this is far fetched, but hear me out. If we were able to find the modem checking code and write a little C program, we could run the algorithm against the both the verizon and AT&T modems and see if we get the same result (00 01 FF etc?). If we get the same result, then that may mean the same private key was used to sign both the AT&T and verizon modems. In other words, IF we find this out, we may be able to determine whether or not flashing the AT&T modem will brick a verizon GS3.

I've also PM'ed koriotto. Hopefully he/she gets back to us with more info about his previous post (about having flashed an AT&T modem on a verizon GS3).

...

And for a bit of humor, a few bytes into each of the modems, MS DOS 5.0 is referenced.
[Verizon Samsung Galaxy S III] newuser134:
Hehe, that was kinda funny about MS DOS 5.0, didn't expect that.

On a different note (and I'm not referring to the Note 2, lol), how do we format an external SD card to hold the right GTP guides, to boot from external storage, as Ralekdev described in the post you referenced a few days ago, which he said it would happen if the PBL went in to error handler? That would be another way to flash an AT&T modem and maybe recover from it even if it does brick at some point. So do we know for sure that it is possible to boot from an external storage device?
[Verizon Samsung Galaxy S III] mybook4:
I'm not sure whether or not anyone tried booting from the external or internal sdcard. Not sure of the formatting, but maybe if the sdcard were block copied exactly like the boot chain (perhaps with dd), it could be done. If it works, like you said, it could prove very useful in resurrecting bricks or possibly getting around secure boot.

PS. Hadn't seen this until now... http://xdaforums.com/showthread.php?t=1856327

It seems to be an amazing resource. I noticed that it has quite a bit of information regarding the boot chain. Hopefully this helps us.
[Verizon Samsung Galaxy S III] cvsolidx17:
Well for the record TMO doesn't have any LTE period atm. I was however referring to HSPA+ so I stand corrected. I'm still in. Hopefully this goes well
[Verizon Samsung Galaxy S III] Strothmann:
The first 2 screenshots posted were on ATT network. the speed test screenshot was the only on Verizon.
[Verizon Samsung Galaxy S III] renzo.olivares:
I might have something....can someone upload the att build.prop
[Verizon Samsung Galaxy S III] mybook4:
Cool. The easiest way to get the build prop is to download an AT&T rom (it's in /system/build.prop). Are you looking for AOSP or TW?
[Verizon Samsung Galaxy S III] renzo.olivares:
have u guys tried changing telephony.lteOnCdmaDevice=1 in your build.prop to telephony.lteOnGsmDevice=1 let me know if it works have some other ideas as well
[Verizon Samsung Galaxy S III] newuser134:
A while ago I installed the UCALH1 stock rooted deodexed rom on my VZW GS3, with VRLG7 Verizon modem. I still couldn't get H+ to work, so I made a fully functional NAND backup and stored it, then I restored to my regular backed up CM-10 rom. I could easily restore that rooted AT&T rom for a min then get the build.prop file for you. Do you still need it, and would that file work for what you need it for? Let me know.
[Verizon Samsung Galaxy S III] renzo.olivares:
no its cool =) just needed to confirm something if you could try the above that would be great
[Verizon Samsung Galaxy S III] mybook4:
Thanks man.

You probably already have these, but here's some at&t build props.

http://db.tt/EwckV3Gi

http://db.tt/fEP7R4RB
[Verizon Samsung Galaxy S III] renzo.olivares:
i see lol i take it back then if your on touchwiz delete the telephony.lteOnCdmaDevice=1

all together and reboot
[Verizon Samsung Galaxy S III] newuser134:
Are we doing this with an AT&T sim and the AT&T APN's enabled, as in trying to get full HSPA+ service? Sorry if this is a noob question.
[Verizon Samsung Galaxy S III] renzo.olivares:
yea
[Verizon Samsung Galaxy S III] mybook4:
Does anyone have an AT&T sim handy?

If not, we may want to consider raising funds to buy a month or two of AT&T service so that we can continuously test these kind of things.
[Verizon Samsung Galaxy S III] newuser134:
I bought a 1-month prepaid $50 everything a while ago, it expired, however, I was told AT&T's prepaid plans do not let you get 3G, HSPA+ or LTE data, so at first I thought that was the reason I couldn't get HSPA+ to work at all. We may want to confirm this one way or another before we pay for that, because believe me, they DO NOT believe in refunds. If this turns out to be true, they do have monthly 4G data only plans for tablets or iPads, if that will work with a phone (obviously voice and text will be disabled, but unless it keeps the phone from establishing service at all, that wouldn't really affect our cause not to have voice or texting).

So first we want to confirm:

1) Can one get access to 3G/H+ data with an AT&T prepaid sim?

2) If the answer is no to the above, can a monthly data-only 4G sim plan be used on a phone?

Member ac21365 has a friend with an AT&T iPhone plan and post-paid sim, we might be able to get him to borrow his friend's sim for this, if that is not feasible, we'll have to find one somehow. I was also told they won't let you try their in-store sims on your own phone, they'll make you have to buy a plan.

Otherwise it would be very useful just to find a person on here that has an AT&T postpaid account with 4G and a VZW Galaxy S3.

On a different note, if there are NO other options, I'd be willing to buy a OneX or Note on AT&T, assuming they have a return period like Verizon does, like 15 days or 30 days, I know it'll cost a good amount and/or a restocking fee, but maybe we can at least raise some of the money here to do that, and then after that, a different person can do it if it's still needed after 30 days. I'm open to any suggestions. I'll pm ac21365 about his friend's sim.
[Verizon Samsung Galaxy S III] ac21365:
Would you mind elaborating on thoee other ideas? I dont have a chance to borrow the iPhone sim often, so the more things I could try in one sitting, the better.

Thanks for your interest in our project!
[Verizon Samsung Galaxy S III] LLStarks:
Our best hope right now is the pending bootloader unlock for the AT&T GS4. It's been posited that it might also work for our phone and possibly unlock the modem for modification.
[Verizon Samsung Galaxy S III] bedwa:
Nice. I'm looking at a few things with the synergyrom IMEI backup as well. It backs up BOTH the NV and the backup NNV I'm going to try to hex compare, edit the NV on the active phone, re-backup the partitions and see where I changed it, along with where in the backup NV. Other than that, this may be the only way.....

Edit: initial look... Partition 12&13 completely change, 20 and 21 do not (12&13 are modemst1 and 2 respectively, where 20 is the backup and 21 is the fsg.)
[Verizon Samsung Galaxy S III] bedwa:
Ok... Sorry for the double post here, but one last update before bed. Since Samsung and Qualcomm are so nice to mount their firmware in the /firmware folder, I pulled firmware from the Japanese modem (scl21) and started swapping files in. I was good till I swapped the modem.mdt file in, which brought up the non-authorized software warning immediately. So, if I can only find some way around that... Or to modify the modem.mdt file so it doesnt trigger the bootloader block, this should work for us. I need sleep, but I'm not done trying yet.
[Verizon Samsung Galaxy S III] jedimyndtryx:
Wow, haven't been on here in YEARS, since I rooted and flashed my old Nook Color, then when I was hacking my Motorola MPX220 and then my XV6700...well...LONG TIME iOS user here, finally looking to jump ship. I will always have my iPad and MBP, but I digress...I got me a VZW S3 through a trade and Im also looking to get 3G/ "4G" enabled on it. The EDGE isnt so bad actually (as I'm throttled half the month anyway) but faster would be better..(I'm coming from an iPhone 5 with LTE everywhere). So I am adding $30 to the cause as well. Glad to be here learning new things and playing with this elusive beast I've hated for so long called Android. Best of luck!
[Verizon Samsung Galaxy S III] mike4lyfe1:
Count me in as well, 30 $ on the bounty for HSPA+
[Verizon Samsung Galaxy S III] LLStarks:
Does 1700/1900 work in Europe?

What UMTS/HSPA bands are confirmed working? What about 850 MHz AT&T?
[Verizon Samsung Galaxy S III] preusstang:
My question is how does the phone know you're not overseas? Is there something in the modem partition that pulls info from the towers to see what country you're in before allowing you to use HSPA+ over EDGE?

I don't understand why it works overseas but not here :/

P.S. I sure wish the OP would do some updating..
[Verizon Samsung Galaxy S III] bedwa:
It's in the baseband itself. 2100 it's the main umts/wcdma band outside the US. Thus by leaving out all but that band, Samsung and Verizon is doing a favor for themselves and VZW's US competitors.
[Verizon Samsung Galaxy S III] ac21365:
This. Wish they had done the S3 like Motorola did with the RAZR and HTC did with the Rezound: They both have quad-band WCDMA in them. I have a -little- more hope for Samsung with the "Nexus Experience S4" having penta-band WCDMA, and the CDMA S4 has quad band GSM/WCDMA.... guess the S3 adopters were just one generation too early for the GSM love.

Also,

LLStarks, any updates on this?

It's a little more simple than that. Even the absurd Verizon S3 is just a slave to the bands enabled in the radio firmware. Assuming a phone is sim unlocked, when you put in a sim and cut the radios on, it'll reach out and try to handshake with whatever it can on all radio-enabled bands. It then tries to register on whatever it finds using your sim's information. When sim and carrier match, you're on. The issue in this thread is that, like some other phones (looking at you Rezound), the hardware for other WCDMA bands might be present, but if the radio firmware/baseband isn't written to use that hardware, you end up with the Verizon S3, which only talks with WCDMA 2100. It was great while I was in Germany, but I did kind of want to use the S3 on T-Mobile's new PCS (1900) WCDMA service. Then again, the Nexus 4 made the S3 irrelevant to that purpose, but I'd still like to see quad-band WCDMA be enabled eventually :)
[Verizon Samsung Galaxy S III] LLStarks:
The GS4 "unlock" didn't happen.

We only got Loki and that works around the bootloader.

Unless you can put a modem or radio configuration in the ramdisk, it's not going to help us.
[Verizon Samsung Galaxy S III] ac21365:
*nods and sighs* aye...
[Verizon Samsung Galaxy S III] bedwa:
Indeed. We have the added issue of the buffer partition as well. The actual radio is in the first partition, but the one with the used NV items is the 11th partition, created on each startup. That's the thick and thin of the issue.
[Verizon Samsung Galaxy S III] LLStarks:
How early in the boot is p11 read and at what point are the radio bands set in stone for that boot?

If it's upon startup, I wonder if a hot kexec or 2nd-init would refresh the partition.
[Verizon Samsung Galaxy S III] bedwa:
The one way read is what's preventing the NV edits from sticking. IF we could somehow have the ramdisk, kernel OR ril read from a different img for that partition creation, it MIGHT work, similar to second boot CM on the milestone 2 using the Euro or Brazilian baseband depending on your needs. (My Goddaughter is using one.)
[Verizon Samsung Galaxy S III] LLStarks:
If you guys chill with us on IRC, we can make it happen or have a wider pool of people researching.

irc://irc.freenode.org/#verizons3 (make sure you have mirc or hexchat installed)
[Verizon Samsung Galaxy S III] bedwa:
It'll be alittle as I'm trying to get my daughter to nap at the moment, but I should be over there later.

Edit: sorry, between my daughter and my 6yr old son, this evening didn't go well. I'll try to pop in tomorrow, life permitting.
[Verizon Samsung Galaxy S III] warbdan:
Any progress on this? I'll add $25 to the bounty.

Sent from my S3, because iPhone is faget.
[Verizon Samsung Galaxy S III] jjr3211:
Put me in for 25.00 as well would love to get this working
[Verizon Samsung Galaxy S III] snowmac:
I can help and test. I have a postpaid Tmobile micro sim that I use in a sgs4g and an factory unlocked iphone 4. Would love to be able to use this sim in my Verizon S3 and actually get their fake 4g and ditch the sgs4g and just carry two phones with me istead of using the sgs4g as a tethering device for the iphone/s3 when I'm in an area that Tmobile has a better signal than Verizon

Zerolemoned 7K rooted over clocked carbonized S3 from Verizon
[Verizon Samsung Galaxy S III] LLStarks:
bedwa, I'm still interested in getting the guys on IRC (the US GS3 CM and kernel maintainers) involved

If you can give me a technical write-up of the proposed boot hijack with memory locations, specific partition labels, needed nv values, etc, I can ask invisiblek or someone else in the gang to assess the feasibility and create a plan of attack
[Verizon Samsung Galaxy S III] bedwa:
I'm out of town today, but I need to look at the Milestone CM code to see how it's done before anything else. Sorry, life's been hectic recently and I've been swapping s3 parts around recently.
[Verizon Samsung Galaxy S III] LLStarks:
Ah ok

I spoke with noobnl, the guy in charge of maintaining the US GS3 RIL last night

He's not convinced we have a firmware problem, just an Android problem

http://pastebin.com/j5mWerAh (log edited for content and privacy)
[Verizon Samsung Galaxy S III] jjr3211:
Any update on the progress
[Verizon Samsung Galaxy S III] My1gdsm:
Testing???

If anyone needs someone to test anything out on a I535. I'm more then willing to be a guinea pig lol. As I've tried about everything within my scope of things to get this working. I'm by no means a Developer though but know enough to Get my self in trouble(or out of trouble)... .

I have a PrePaid(Net10) and PostPaid Sim that I use to get Wcdma 850 and 1900 locally on a Few phones. We also have LTE here not that it pertains to this...

I'm already running a I747 recovery as well as I747 Rom with some Build prop edits And have had no issues on my I535 for the last month... I've managed to soft brick a couple times though trying different AT&T Basebands... . I'm not too worried though if anyone gets on this... I Should have a jtag in the next couple months as well if there is any worries about a hard brick.

Also I'd put at least $20 towards this... .

Thanks!

Just a FYI I'm pretty sure that you can enable the bands in the Service menu.

(1)UMTS > (1)Debug Screen > (8)Phone Control > (7)Network Control > (2)Band Selection > THIS is the interesting part. There is no option like a 747 for the Fifth menu. But if you enter 5 it will go to the Custom Per band selection Menu... As well it seems at least in my case if you enter each and wait that it does try to switch bands though it give the menu not exist prompts.

But, from poking around seems that and obviously that without any kind of provisioning of the uarfcn(at least for download) that the phone is not going to connect. Though I seem to have seen activity on the uplink before. As well when the first connecting after fresh rom install if you are in the Mobile networks menu there is a prompt that goes away before I can get a chance to do anything then it goes straight to gprs/edge.

If anyone needs wants more info on anything or needs anything let me know. I'm not always the best at explaining things in the proper terms as this is not exactly My first fortay. So... Ya just let me know as said.

Lastly where is the OP? Pretty sure this all could use an Update and the running total is a bit higher than the title?
[Verizon Samsung Galaxy S III] Mrhunter13:
is it possibly to use the same method of changing the radio ...like they have been able to do with the Verizon raza Max to unlock it to the us carriers ???
[Verizon Samsung Galaxy S III] LLStarks:
Just bought a $10 T-Mobile SIM.

I'm going to try a few things.
[Verizon Samsung Galaxy S III] ac21365:
I tried pretty much everything but flashing a different radio to the phone and met with no success. EDGE only from AT&T and T-Mobile (I'm in one of T-Mobile's 1900MHz WCDMA markets to boot).
[Verizon Samsung Galaxy S III] snekiam:
I am good for $10. I am very interested in getting this working on AT&T/Straight Talk.

-snekiam
[Verizon Samsung Galaxy S III] Mrhunter13:
can anybody answer this is there anyway possible to get the GSM side to work with us carries and have the full internet working I mean with doing a hardware modification
[Verizon Samsung Galaxy S III] dewhashish:
I was able to plug in a T-mobile SIM card and make a call, just switched my phone over to GSM/WCDMA auto under mobile networks. I use paranoid android 3.6, also I didn't have a chance to enter any APNs to test data. I haven't flashed any other radios in case of bricking
[Verizon Samsung Galaxy S III] Mrhunter13:
u can do that cuz it's a world phone but the biggest thing is getting faster speeds of internet
[Verizon Samsung Galaxy S III] ac21365:
Anything new on this? I'm to the point where the GS3 is available as a guinea pig device. Would love it if pcs wcdma worked since my market is now live with tmobile.
[Verizon Samsung Galaxy S III] Rich3077:
For what its worth I hope this project does not die..I can't handle verizon robbing me anymore so I picked up a tmobile sim...works great exept for slow edge 2. Before anyone jumps me..yes verizon really is trying to rob me..never again will I enter a contract with them.
[Verizon Samsung Galaxy S III] djteotancolis:
Same here! Picked up T-mobile, dont mind the Edge for now but it would be awesome if we can have 3G!
[Verizon Samsung Galaxy S III] Rich3077:
Okay... I know most or all of you are already aware of the service mode *#197328640# on stock rom, I only mention this because after reading this whole thread a few times I haven't seen it mentioned, I am scared of most of this stuff because I don't know what it means but I poked around in there anyway. Somewhere in that maze of options is some settings for 1900 GSM. I did play with a few options and it didn't get me 1900, I thought I was okay after all was said and done. A few hours later I lost all signal to Verizon after reinserting the Verizon sim and ended up having to do a factory reset to make it work again, During this time my T-Mobile sim worked just fine.

Since the settings are in the service menu could it be as simple as I need to be carrier unlocked?? I know I am sim unlocked via build prop hack but I don't think that's the same thing. I guess I am just grasping at straws here but with the settings in the service menu it seems this should be so damn easy,
[Verizon Samsung Galaxy S III] mikexxxda:
Any chance this would help?

http://xdaforums.com/showthread.php?t=2256647
[Verizon Samsung Galaxy S III] SDRebel:
Can you post what you did to get edge? With tmobile I only get voice/sms whereas with att I got edge without a problem, not sure why not on tmobile....I'm in an area where tmobile has 1900Mhz if that helps. I used apn fast.tmobile.com

At some I saw a G with tmobile, not sure why...with att it was E (for edge, aka 2.5G), not sure if the G was for GPRS

---------- Post added at 12:17 AM ---------- Previous post was at 12:16 AM ----------

Same question as above :)

Duh: got edge working, not sure why it didn't work before