yashsingh1/xdaforums huggingface dataset:
[Sharp Aquos Crystal] powercamg4:
Might I note when forcing the radio into GSM or WCDMA mode in Phone Info this will cause the phone app to crash forever and will require you to enter airplane mode. Then you will have to manually launch the Network Settings activity (the same way you can launch the Phone Info activity) and select CDMA or CDMA/LTE

Screenshot of the Phone Info activity bellow:
[Sharp Aquos Crystal] whynot4444:
you cannot choose GSM and WCDMA but you can choose LTE/3G/GSM :v
[Sharp Aquos Crystal] sonnys3000:
aer u unlock the boost 306sh before?
[Sharp Aquos Crystal] powercamg4:
There's no limitation on what you can select but it's up to the modem if it wants to accept it. What do you mean LTE/3G/GSM, WCDMA/HSPA is 3G
[Sharp Aquos Crystal] whynot4444:
i mean when you choose WDCMA and GSM, it came back to LTE/CDMA, but when you choose LTE/3G/GSM, it doesn't, that mean it have GSM, but i think 3g or 4g only :(, sorry for my bad english
[Sharp Aquos Crystal] UltimaXtreme:
There is no option for GSM in the 306SH's cellular settings.

It's weird, that sounds like something forced on a system level by this app, if that's an actual option in your settings. But it's likely not, just something in the app you speak of. Considering you have Clip Now, let's see a few pics go up.
[Sharp Aquos Crystal] powercamg4:
? Just because gsm is a option does not mean tha it is enabled or avalible for connection. All my older CDMA android phones have had the GSM option even back before LTE, the phone info activity is a standard menu in all android phones regardless of modem. If any thing out could use LTE but the phone is locked to the a white list of sims
[Sharp Aquos Crystal] whynot4444:
so no hope gsm for this device
[Sharp Aquos Crystal] ryu_gian:
no all 4 of my 306SH are sprint.
[Sharp Aquos Crystal] vanarebane:
Have you tried dialing this code?

*#*#4636#*#* – Phone information, usage statistics and battery

On 305SH you can select radio modes like GSM/LTE/WCDMA

---------- Post added at 09:19 PM ---------- Previous post was at 09:11 PM ----------

Ok, it does not work on 306SH
[Sharp Aquos Crystal] powercamg4:
The only hope I can muster up is not running this rom and running something not from sharp like CM or PA

But the modem may not support GSM, or its been programmed to not accept the request to change to GSM bands. The first part is getting past the SIM lock
[Sharp Aquos Crystal] vanarebane:
If you can get the 306SH radio chip model (305SH had Qualcomm WTR1625L), then I would be able to tell you if it has GSM by hardware or not.

It's not that hard to unscrew rear plastic and open the shield where chip is under :)
[Sharp Aquos Crystal] powercamg4:
Because im nice (and don't use this as a phone, only a mp3 player) I ripped off the back plastic and RFI shield.

There the same radio chipset, So this is a software setting that was set by sharp (or sprint) that locks the SIM and radio/modem. This is similar when I had a S3 on Verizon (never again)
[Sharp Aquos Crystal] powercamg4:
Why did you not add anything about how this could help developers and users enjoy there devices more. Thats like the first thing I have seen on these letters addressed to companies like Samsung and LG. The first part of the letter didn't even help describe how this will help sell the device and attract developers.

"Samsung and LG have cooperated and even hired some of the developers from XDA because they believe that unlocking their smartphones has boosted their sales." Source? I don't think so, because the S5 has a locked and encrypted boot loader, they hired them so they could strengthen the security of there devices because Samsung is trying to get into the enterprise and government.

You need to say how this is will help increase sales and how the developers will use the new tools they have at there disposal. You want it "unlocked", what do you want by that? Root(don't see that happening)? Boot loader unlock(more likely)? Modem/SIM unlock(thats up to carriers)?

Come on OP, we need to try better than this, and next time address it to the "design and development team for the 305/6SH and Sharp's Mobile Devices division in the USA and Japan" there the ones who are responsible. I'm sure the CEO has better things to do like manage his company as a whole.
[Sharp Aquos Crystal] vanarebane:
There you have it. You just confirmed that you CAN have GSM/LTA/WDCMA on 306SH. Just the software is blocking it.

Maybe the Radio drivers are what configure this options?
[Sharp Aquos Crystal] powercamg4:
Yes your correct, there is a high possibility that the 306 supports GSM hardware wise.

In terms of software it could just be this rom, Sim lock enforced by the rom, at the worst it could be programmed into the radio to only use CDMA, if I could access the modem directly via serial I could pull up a AT command line and test some known commands to change the configuration. I worked with A Sierra Air Prime LTE modem and I was able to force it to use specific bands but that modem was GSM only.

BUT that IC is just the radio chipset not the actual modem/radio. There's still more ICs for me to identify but I don't really think they would pay for a poly band CDMA/GSM radio, its quite expensive, don't forget this phone is cheap so they had to build it as cheaply as possible.
[Sharp Aquos Crystal] vanarebane:
You can go though and compare all the 306SH chips with 305SH. Here is my image on 305SH:

https://www.dropbox.com/s/kq32fn60kog7u1z/sharp 305SH chips.jpg?dl=0

For radio, there is just only 2 IC's. The radio and the amplifier. Marked pink on my image. The cyan coloured is unknown but seems to be involved in radio.

I believe that Qualcomm would not custom manufacture a CDMA only chip or CDMA limited chip just for Sprint/Boost to do some customer abusing.
[Sharp Aquos Crystal] powercamg4:
I was going to go to sleep but oh well.

AH THANKS FOR THAT. Do you have a better image so I can read the full part number of the radio chipset?

Also I was unaware that this device has a integrated radio chipset and transceiver (due to the limited information out there in this chipset, thanks Qualcomm for not helping again), so the radio is inside of the WTR BGA IC, which is VERY GOOD. now the SWPT GMC25 device is unknown because there is nothing on that IC, but it could be a multiplexer, pre-amp, etc. who knows. The 306 has assorted IC's in place possible due to design differences or FCC regulations the prevented them from using that IC.

even better news is that the Avago Power Amplifier (APCM-7700) is a POLY BAND C/U/L amplifier, this is critical because if the amplifier doesn't support it then its a done deal. so the fact that is supports UMTS is a big green light.

now the datasheet I have on this power amp is not specify addressing the amplifier its addressing there product line, so I cant get that much info ATM.

But to answer what you said at the bottom, no they would not thats why this is a multi/poly band chip because it has multiple frequencies in which it modulate at. Now this is new technology then what I am used to so for all I could now this could be a softradio where the who radio is software driven. I'm used to seeing devices with separate radio's and a specific radios for different standards (example: GSM uses GPRS, EGPRS, UMTS, WCDMA, and HSPA while CDMA uses CDMA2000(1X and 1xEvDO Rev A)). Now this could be a world transceiver (I still need the datasheet because there is more to the part number) but I don't know what standards it supports.

I want to get access to the modem via serial and get access to the AT command line because there I can see how it is setup. If anyone has gotten access to the serial connection that would be awesome.
[Sharp Aquos Crystal] vanarebane:
Glad to help. You can download full image from Dropbox (topright corner). If you need more accurate image.

I have a idea to put the PCB under scanner to get better image. I can do this in the evening (12h from this post)

Anyway, the most important and distinguishable IC's are marked on this image.

What you mean by APCM-7700? Did you find this IC in 306SH? Because I did not notice any of those IC's (or it was smaller).

There is a Skyworks SKY77629-21 Multiband Power Amp in 305SH.

Now I'm thinking, for Sharp, that it's more profitable to make 1 phone with 1 PCB design and use all the same IC's on the 305 and 306 models. Only stickers and soft will be different.
[Sharp Aquos Crystal] whynot4444:
wao, you mean 306sh have GSM but it lock by software, OMG, i can't believe this
[Sharp Aquos Crystal] powercamg4:
Please do! That would be a big help! I plan on doing the same when I get home today from work.

The Avago power amp is present on the 306 while the Skyworks power amp is in the 305. This could be simply because the Skyworks one did not meet FCC certification, does the 305 have a FCC logo on the box or safety and regulation paper? On the 306 if you go in about > regulatory information it only shows a FCC certification.

If there were the same board there would be no 306. Just one 305 world edition. That's why there is a international version and a domestic version sold by carriers.

Update: I have gotten the RF exposure test info and there's no good news there, the 306 was only tested for CDMA and TDD-LTE (taptalk app for windows phone is horrible so I can't attach the screenshot at this time). If this device was not certified for GSM then its not going to happen. I'm,still looking though the 146 page pdf so give me more time.

Edit: There is still a p[possibility, I'm looking in to the UICC unlock but the next problem is this device uses UICC for sprint so I don't know if its backward compatible with SIM's

---------- Post added at 11:03 AM ---------- Previous post was at 10:44 AM ----------

It's possible, I could be disabled but to FCC regulations, if its not certified for GSM then it will not be operate on GSM.
[Sharp Aquos Crystal] whynot4444:
i think you are very interested for this device, i will help you, 10/1 i will have a new device (old device i sold) and i will try to unlock by MSL
[Sharp Aquos Crystal] powercamg4:
I have now taken macro shots of the radio front end and chipset.

1. is the Avago power amplifier, this does support the UMTS standard, so thumbs up. (funny there not using a Qualcomm QFE23xx series power amp that is suggested by qualcomm)

2. is the radio front end, this is replacing the SWPT GMC25 front end

3. is the QFE1101 "Envelope Tracker" power management IC for the radio, this is part of Qualcomm's "RF360" front end solution.

4. is finally the WTR1625L radio chipset/transceiver, which is used in the LG G3 and OnePlus One.

So YES, it appears that the radio chipset supports GSM/UMTS. Soooooo, the next part is 1. get past the RUIM/SIM lock 2. is this device backwards compatible with SIM's. (Edit: its possible, just need to get past the lock)

Has anyone gotten the UICC Unlock to work?

Edit: I tested again to see how it would like my AT&T SIM and i got what i though i would get, perso lock. Didn't even attempt to read it. I attached a screenshot of what you may see.
[Sharp Aquos Crystal] powercamg4:
I am, this would be the 3rd device i have attempted/successfully modified. Lets hope the FCC is not doing to be knocking on my door because im breaking there regulations :)
[Sharp Aquos Crystal] whynot4444:
haha, this is the first time i make a hacker :v, i will break it
[Sharp Aquos Crystal] coldface:
device must be rooted to continue
[Sharp Aquos Crystal] whynot4444:
yes, it will be
[Sharp Aquos Crystal] powercamg4:
Yes I needs to rooted but the hard part is where has sharp left a hole open, I am still trying to figure out how the boot loader works on this device, it acts as if there is supposed to be no interaction.

Next problem is that there's nothing to really compare this device to, the 305 has completely different software while the 306 has a incomplete build of stock AOSP/Google Android

Sent from my Nokia Lumia 1520
[Sharp Aquos Crystal] NemesisMB:
Dear all, I have MSL code from the boost unlock website. I have bought it from ebay to India, is there any way I can unlock this 306sh to use in India?
[Sharp Aquos Crystal] siberian85:
Same thing, I am trying to figure out if this phone will work with GSM carriers in Europe like Telenor and Vip or Telecom Serbia
[Sharp Aquos Crystal] powercamg4:
What's the frequencies the carrier operates on
[Sharp Aquos Crystal] vanarebane:
Sorry for the delay. I caught some illness on the last minute.

The scanner did not work for me.

Here are the HD image of 305SH PCB. Notice the board model number between sim and sd slots.

https://www.dropbox.com/s/6zcifmyxbaosfap/IMG_0404.jpg?dl=1

Hope this helps!

From the manual: 305SH meets all the US, EU, Japan, FCC RF SAR regulations.

It even has CE, with means that it has a mandatory conformity marking for certain products sold within the European Economic Area.

So this was even tested for EU markets???

And from powercamg4 images, I see that the radio part has completely different layout. I guess they made poorer version for US...
[Sharp Aquos Crystal] NemesisMB:
I also spoke to boost customer care a couple of days back and the guy said that Boost will release unlock codes in mid feb for all their mobile phones
[Sharp Aquos Crystal] onroP89:
i saw that massage too, but dose it really help ? that means we can use the 306 with different CDMA carriers. Still no GSM version... for US/EU
[Sharp Aquos Crystal] powercamg4:
Can you repost the link, I think XDA removed part of the URL

With those certifications then I would make me think that the 305 is a certified world phone (like most Japanese phones) and is ready for use everywhere.

And yes I would agree that this device was cheaply built, the RF front end is much different than the 305 and could have been done that way so they could save as much as they could. Which is why I'm getting bad felling about how this device is shaping up, cheap RF front end, AOSP instead of Sharp's polished skin, incomplete FM radio that is mentioned as working but yet is hidden, only tested and certified by the FCC for CDMA (screenshot bellow). I cold not find any other certifications and tests in the regulatory information section of the android settings and I can't find it in the booklet besides the page on its FCC compliance.

In the screenshot you can see that sharp has only had this device tested for CDMA usage, this is the only test result I have found from the FCC for this device
[Sharp Aquos Crystal] vanarebane:
Sorry, XDA broke the link yes. Here is the link again: https://www.dropbox.com/s/6zcifmyxbaosfap/IMG_0404.jpg?dl=1

---------- Post added at 10:22 AM ---------- Previous post was at 09:55 AM ----------

I checked the IMEI for my 305SH and got results from http://swappa.com/esn:

Blocked	Lost / Stolen (IMEI Blacklist)

This device is blocked by at least one carrier.

Activation Status	Blocked (IMEI Blacklist)

This device cannot be activated.

But from here https://ct11.my.softbank.jp/WBF/icv?lbk=11 I got response that the IMEI is good.

So SoftBank blocks/bans their phones by default? So it's more difficult to unlock the phone and use other carriers :(
[Sharp Aquos Crystal] whynot4444:
her, that strange, why 1 imei in sprint carrier can check in softbank carrier
[Sharp Aquos Crystal] vanarebane:
Cause it's a softbank phone :P
[Sharp Aquos Crystal] Senor_Silencio:
Hello!

I buy it cellphone (306sh), but I don't can use in Chile, be have any unlock for use in Chile, no?.

My cellphone is from Boost Mobile.

Cheers. :D

Chile use GSM, CDMA not work here.
[Sharp Aquos Crystal] siberian85:
Gsm 900/1800/2100:

---------- Post added at 01:51 AM ---------- Previous post was at 01:47 AM ----------

gsm 900/1800/2100:
[Sharp Aquos Crystal] whynot4444:
hehe, at VN i can use it :v
[Sharp Aquos Crystal] anh4xeo:
what service do u use in VN?
[Sharp Aquos Crystal] whynot4444:
Mobifone, use GSM 1900/1800 :D
[Sharp Aquos Crystal] ezeuba:
Please kindly share how you got the MSL. I have the same problem here. Thanks.
[Sharp Aquos Crystal] siberian85:
Yes how did you do that

and if is boost mobile sharp or...?
[Sharp Aquos Crystal] ryu_gian:
use the run.bat and it will show in hex from there just convert hex to text

http://www.unit-conversion.info/texttools/hexadecimal/
[Sharp Aquos Crystal] firasat:
Can I switch cdma carriers ?

Hello, I recently got aquos crystal 306sh locked to boost to India. I have its msl code with me.....Can I use it with other cdma carriers available here like Reliance or Tata (which Have a 900Mhz-1800Mhz bands, I think) If yes please tell me how ??:confused::
[Sharp Aquos Crystal] (x_x)Zombie:
Sounds promising, there may be a root yet in the works, thanks a bunch for taking the time to look into it, not being able to fully utilize the external SD card is a bummer. I noticed that a app I've had for awhile called Foxfi (its a paid app but it solves tethering with the aquos on boost network, its about $5 and has a free trial). Its a hit or miss on phone models. I noticed it gave the app permission to access WiFi hotspot with no grief. This should normally be only obtainable trough root, my hypothesis is that the certificate downloaded with the app allows it root permission, if you were to hack a certificate and changes the values to reference/target superuser ect.. It might provide root. Just a thought.
[Sharp Aquos Crystal] d@vo:
Hey, really that foxfi work for boost Mobile?
[Sharp Aquos Crystal] anh4xeo:
can you provide some picture of the phone working with gsm in VN? im planning a trip there next month. i would love to find out if the phone works on gsm there. thank you.
[Sharp Aquos Crystal] sonnys3000:
are you get the msl for your LG LG660?
[Sharp Aquos Crystal] moba_automation:
Tried on 305SH

##3282# doesnt work on my 305SH

so I used ##786#

this part of code has the MSL I tried and It didnt return the real one

V/RILJ ( 1338): Creating QcRilHook instance

D/RILJ ( 1338): [EXTDBG] validateMsl: 313939323731

V/RILJ ( 1338): onQcRilHookReady called

D/RILJ ( 1338): Sending OEM_HOOK_RAW data: 514f454d484f4f4bdd07090006000000313939323731
[Sharp Aquos Crystal] whynot4444:
no i mean GSM 1800/1900 i can use in VN, not this device can use it in VN, because some one tell this device has GSM 1800/1900 :D
[Sharp Aquos Crystal] (x_x)Zombie:
Yes Foxfi works, I bought it like two years back for an old lg on straight talks plan (Walmart tracphone) but it seems newer and fewer devices are compatible. My surprise the aquos fired it right up
[Sharp Aquos Crystal] NemesisMB:
Ohh I am now so confuses. Is it going to work to work on any other cdma at least or not? boost website is give me MSL. now what to do with MSL to unlock it to work on other cdma? is MSL not sufficients? someone please helps!!!!
[Sharp Aquos Crystal] d@vo:
I buy the app yesterday but no work, the app can active the hotspot mode but no internet access in any device I try, any suggestions.
[Sharp Aquos Crystal] (x_x)Zombie:
Not sure, I know I've used msl code to reconfigure off proxies, so could just be a speed issue with your mobile data, but I dont have any connection issues. Just tested old rca tablet and moto g connected just fine and loaded webpages.
[Sharp Aquos Crystal] jamer123:
gsm

Ting has the device listed as a gsm compatible phone that they can unlock https://help.ting.com/entries/43744186-International-SIM-Unlock#table
[Sharp Aquos Crystal] ryu_gian:
this is the log from your 305SH? if yes then ur msl is ( 199271 ), took the hex frm D/RILJ validate Msl:. try/check if it worked
[Sharp Aquos Crystal] moba_automation:
305SH MSL

Yeah, that's the log. 199271 is the code I entered in the phone as MSL code . That's not the real one. When trying the MSL code with ##786# the actual MSL doesn't reach the log. Its not included in the log. I read the complete log and its not found.

Sometimes access to MSL may not be possible in softbank 305SH. There are only two secret menus that work in 305SH.
[Sharp Aquos Crystal] ryu_gian:
do a factory reset then run a logcat, open CMD then enter adb logcat > 305sh.txt on the phone enter ##DATA# or ##786#, go to c:\users\(name) give me the log that is there the name of the file is 305sh.txt, i will check it out for you
[Sharp Aquos Crystal] moba_automation:
Hello , I have attached the logcat file after running MSL with a reset.

Thank You
[Sharp Aquos Crystal] myspac:
I have now the 305SH locked and the 305SH unlocked: with IMEI, I have the same result on your websites.

So I think that evenif SoftBank blocks/bans their phone, it's possible to unlock it by soft...
[Sharp Aquos Crystal] vanarebane:
Can I unlock my 305SH also when someone helps to find the MSL?

I checked the Swappa with other IMEIs and it gives banned/locked status on any phone that is not US. Even my open and currently in use Nokia N8 was banned.. :silly:
[Sharp Aquos Crystal] myspac:
(there is no link between MSL and my last post. I bought my second 305SH unlocked; we don't know how to unlock 305SH, but I think it must be possible by soft and not only by Softbank).
[Sharp Aquos Crystal] vanarebane:
Can you link the seller you purchased from?

I guess you do not have root on unlocked 305SH?

Lets hope we can help you in some way to find how the phone was unlocked by soft.
[Sharp Aquos Crystal] myspac:
- I must ask the seller before if I can post it.

- the phone is "only" unlocked, not rooted.

- I hope too !
[Sharp Aquos Crystal] moonalikhan:
the phone works with you on GSM network if its unlock kindly share the link of the seller :)
[Sharp Aquos Crystal] ericofxda:
I'm not a robot

If its unlock... that means i can buy my dream phone now :)... ive been reading a lot here in XDA for a week now... looking for SHARP AQUOS CRYSTAL 305SH and 306SH.

Now that you have an unlocked it is really good news to me. :good: :fingers-crossed:

Thank you in advance MYSPAC
[Sharp Aquos Crystal] myspac:
Ok, the seller is agree.

- he sell the unlocked phone 305SH for ~450 USD (600SGD).

- pink is a bit less: ~419 USD.

If you are interested, just tell me, I forward you his email in private.
[Sharp Aquos Crystal] whynot4444:
wao, so expensive for a device with snap 400 :3
[Sharp Aquos Crystal] d@vo:
Way every body want to unlooked this phone and don't want to rooted.
[Sharp Aquos Crystal] Zombiebliss:
I'd be warry. It could be a scam. And at the very least its a rip off in price. Also their needs to be a separate thread for 305 and 306 users, 305 users are cluttering the thread with wanting a way to unlock the carrier, while 306 users want root or boot loader.
[Sharp Aquos Crystal] (x_x)Zombie:
I've gone through and tried several "easy root methods" none work, so all of the previous rooting exploits don't work.

I've attemted to unlockboot loader through command prompt (as you would a nexus), no luck.

After running into a rather long video explaining how early exploits were found through hacking certificates, I began to think, what if those sneaky bastards put in a new way to lock us out by having the phone demanding a certificate from the computer to unlock boot loader.
[Sharp Aquos Crystal] coldface:
nothing we can do without root
[Sharp Aquos Crystal] (x_x)Zombie:
It might be a start to bootloader

After messing with different sequenses I believe I've stumbled onto how to put your phone into boot loader mode. While the phone is turned off, hold pwr+vol up and the led light at the bottom will turn blue for about 15-20 seconds, if you are to connect It to a PC during this time it will ask to install drivers. My laptops not fast enough load up the device properties to manually install the abd driver to further test. Anyone with experience unlocking boot loader through command prompt (that's you nexus owners out there) with a fast enough comp please give it a try.

---------- Post added at 08:28 PM ---------- Previous post was at 08:26 PM ----------

I fear that we may need an application from sharp that will connect to the phone in the short time the led remains blue.

---------- Post added at 09:03 PM ---------- Previous post was at 08:28 PM ----------

I just had like a jimmy newtron brain blast, use command prompt to install the driver! Have all the prompt pre written out then as soon as the phones hoocked up in its blue led mode hit enter. Will read into it and test, fingers crossed.

If this gets unlocked someones buying me a beer ;)