yashsingh1/xdaforums huggingface dataset:
[Galaxy S 5 General] Sepero:
Thanks for the feedback botwa2000. I said "all bands", but I probably should have said all possible bands. Right now I'm in the USA and I'm most interested in USA LTE bands, but I'll be going overseas in a few months. The SM-G900F default bands should work great for me over there, so I don't want to accidentally mess something up before I relocate. Keep up the great work guys. :)
[Galaxy S 5 General] Hongdae:
Even worse. Now QPST and Qualcomm NV Tools give me error when connecting so I can't use them and still no service. I am starting to think that my phone is done.
[Galaxy S 5 General] vndnguyen:
Just FYI:

- If you cannot launch the secret code *#0808# from your dialer, use Phone INFO ★Samsung★ app > Menu > 'Secret Codes' > 0808 > 'Launch 0'.

- Calculating NV items in an easy way: use Qualcomm NV Calculator.
[Galaxy S 5 General] botwa2000:
I posted the first part into my OP and am going to mention the second app there also.
[Galaxy S 5 General] botwa2000:
I hope not though I understand how frustrating it is!

I read about similar bricks in xda forums I think. Have a search, there must be a solution.

Things that come to mind are re-flashing modems from miscom's OP or EFS partition backup made via custom recovery from another G906S model. Or maybe there're other ways.

Be sure to post it here once you're successful.
[Galaxy S 5 General] Hongdae:
After editing NV values again I have GSM service back, so my phone is not a total brick now. However, still no WCDMA and LTE.

I guess I am doing something wrong when editing, this is what I did:

NV calculator (GSM/WCDMA Band, Calculation Using Standard Notation):

- NV 1877: 562949974393728 -> QXDM: There is only 1 field. I wrote the number on value and clicked on write.

- NV 0441: 896 -> QXDM: There are 2 fields:

Nam: I can't write any number bigger than 255. It says bad parameter. I have 0 on it.

Band: I wrote 896 here. Then value goes to 0x380.

- NV 0946: 320 -> QXDM: There are 2 fields:

Nam: I can't write any number bigger than 255. It says bad parameter. I have 0 on it.

Band: I wrote 320 here. Then value goes to 0x0140.

- NV 2954: 131072 -> QXDM: There are 2 fields:

Nam: I can't write any number bigger than 255. It says bad parameter. I have 0 on it.

Band: I wrote 131072 here.

NV calculator (LTE Bands, Calculation Using QXDM Notation):

- NV 6828/6829: 589909 -> QXDM: Each one has 2 fields. I wrote 589909 on all of them.

Should I input them in a different way? Thanx!
[Galaxy S 5 General] botwa2000:
Perhaps [MENTION=2018502]vndnguyen[/MENTION] can advise on how he derived the values for 441 and 946 in his calculator?
[Galaxy S 5 General] vndnguyen:
According to Qualcomm descriptions:

- NV1877: 64-bit number
- NV0441: Bits 00-15 of NV1877
- NV0946: Bits 16-31 of NV1877
- NV2954: Bits 32-63 of NV1877

So:

- NV1877 = 562949974393728 (Dec) = [COLOR="DarkOrange"]0002 0000[/COLOR] [COLOR="Blue"]0140[/COLOR] [COLOR="Red"]0380[/COLOR] (Hex)
- NV0441 = Bits 00-15 = [COLOR="Red"]0380[/COLOR] (Hex) = 896 (Dec)
- NV0946 = Bits 16-31 = [COLOR="Blue"]0140[/COLOR] (Hex) = 320 (Dec)
- NV2954 = Bits 32-63 = [COLOR="DarkOrange"]0002 0000[/COLOR] (Hex) = 131072 (Dec)

Very clearly, right?
[Galaxy S 5 General] Hongdae:
That is really clear yeah, thanx! But what I want to know is what value from 0 to 255 (I have 0 on all of them and only GSM is working) I should write on those nam values at NV0441/0946/2954, in order to switch the WCDMA bands on .
[Galaxy S 5 General] botwa2000:
I'll have a look the values on my phone as soon as I'm near a computer.

Have a look in the service menu per my guide if WCDMA and LTE bands are listed and activated.
[Galaxy S 5 General] botwa2000:
Inside each category per this screenshot
[Galaxy S 5 General] Hongdae:
Yeah, the bands are listed, but my phone only works if I choose GSM only mode.

If I select automatic, my phone looks as if it was connected (the logo shows max. signal) but I can't call, receive calls or connect to 3g:
[Galaxy S 5 General] yakapa40:
hello

i think your method to calculate 3g bands is not good ( like i said in other thread)

you can take a look here: http://xdaforums.com/android/general/3g-lte-frequency-nv-items-qualcomm-t2950491

regards
[Galaxy S 5 General] Hongdae:
Thanks for your help but I don't understand how you go from those values to the ones you have to input in QXDM.

As I said in my previous posts here, NV 0441, NV 0946 and NV 2954 have 2 fields, nam and band. I can't find anywhere what should I write in both of them, I only have 1 number per NV value and I guess I need those 2.

Sorry for asking again about that, but I am a super starter here and I can't find any information about those 2 values.
[Galaxy S 5 General] yakapa40:
i don't use QXDM ( only EFS pro and NV items reader writter) so i can't help you

can you post a sreenshot ?

regards
[Galaxy S 5 General] Hongdae:
There you have all the screenshots that I posted from QXDM. I hope you know what those values are!
[Galaxy S 5 General] botwa2000:
Do you mean the method as compiled by fffft that I have posted in the spoiler or the qualcomm NV calculator app is wrong?
[Galaxy S 5 General] yakapa40:
not the method but i think we don't need to change NV441 996 and 2954 if they are like this:

441:00 FF FF 00 00 00 00 00

946:00 FF BF 00 00 00 00 00

2954:00 FF FF FF FF 00 00 00

and only change NV1877

regards
[Galaxy S 5 General] botwa2000:
There you go...

View attachment 3034125

View attachment 3034126

View attachment 3034127

View attachment 3034128

View attachment 3034129

View attachment 3034130
[Galaxy S 5 General] yakapa40:
[MENTION=6180894]Hongdae[/MENTION]

have you try NV items reader writter to compare with QXDM ? : http://www.cdma-ware.com/workshop.html
[Galaxy S 5 General] botwa2000:
I think you're right as the moment I changed those values I lost the connection.

I wouldn't change the OP just as yet until we are certain.

BTW I hope you don't mind I quoted your thread in the OP as I find it quite useful and relevant.
[Galaxy S 5 General] Hongdae:
Just did it. I have the same values for 441, 946 and 2954, so I guess the problem is in 1877?

Thanks!! Can you please post also your value of 1877 on QXDM? Is the only one I guess we have different and my phone is still not working on WCDMA
[Galaxy S 5 General] botwa2000:
Here I'm uploading a complete NV download from G906K made with EFS Professional.
[Galaxy S 5 General] yakapa40:
hello

you can see items 441-946-2954 are like i said

441:00 FF FF 00 00 00 00 00

946:00 FF BF 00 00 00 00 00

2954:00 FF FF FF FF 00 00 00

even NV1877 is

01877 (0x0755) - OK

DF 03 FC 07 00 00 02 00 00 00 00 00 00 00 00 00

but i don't understand NV6828 and 6829 ?

06828 (0x1AAC) - OK

D5 00 09 00 00 00 00 00

D5

00

09

00 00 00 00 00

if you want band 1,3,5,7,8,17 and 20 :

D5 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00

regards
[Galaxy S 5 General] botwa2000:
In each of those NV there are two lines. I just input identical values in each. Maybe it's just how EFS interprets the edits.
[Galaxy S 5 General] Hongdae:
Thanks for the info, but if I write any of your values in my phone, I lose the signal in all bands and, if I open the service menu, it goes blank.

This is so weird.
[Galaxy S 5 General] botwa2000:
Do you reboot after writing the values? The signal disappears at first but reappears after reboot normally.
[Galaxy S 5 General] Hongdae:
Yeah I always reboot
[Galaxy S 5 General] botwa2000:
Sorry gotta ask. I also assume that you convert to decimal format, correct?

You're right, this is totally odd.

You must have broken some other NV value by your initial operation in the hidden menu.

BTW can you repost it here so that perhaps someone with knowledge will hopefully be able to advise.
[Galaxy S 5 General] Hongdae:
I convert to decimal if using QXDM, but with CDMA-WARE NV items editor I change the values of the .txt file in HEX format and then write them.

This is what I did by mistake, I touched this:

ServiceMode

MAIN MENU

[2] UE SETTING & INFO

UE SETTING&INFO MENU

[1] SETTING

UE SETTING MENU

[1] PROTOCOL

UE SETTING PROTOCOL MENU

[1] AS

AS CONFIGURATION

[8] ACQ DB DELETE

ACQ DB DELETE

[1] LTE ACQ DB DELETE

[2] WCDMA ACQ DB DELETE

LTE ACQ DB is deleted

WCDMA ACQ DB is deleted

Remove battery after 20 sec

There must be a NV file with that info, but the only one I can find is the NV 722 - "Acquisition Database" - "acq_db" - "GSM" (GSM mode works perfect so this is not what I need).
[Galaxy S 5 General] yakapa40:
i can see these files in modem.bin but i don't know if we can restore with NV items

[IMG="debug engineer"]http://i.imgur.com/aP2yJYA.jpg[/IMG]

regards
[Galaxy S 5 General] Hongdae:
I am totally lost here. No idea about how they can be restored, but thanks for the info, you are the first one shedding some light on this problem!
[Galaxy S 5 General] botwa2000:
There must be a way to flash modem files from another device of the same model G906S.

You haven't removed the physical antennae from your phone, have you :)
[Galaxy S 5 General] Hongdae:
Haha not yet, yeah! I flashed the modem with the following one after I got the problem, but nothing changed:

http://xdaforums.com/galaxy-s5/development/galaxy-s5-g906-custom-rom-t2848569

MODEM G906S NJ2

MD5: b2fe7405a7dbb86f5bcc7f1aa3ff0c4f
[Galaxy S 5 General] yakapa40:
the apk : KTHiddenMenu is in app files and not priv-app

you can control it if your phone is root with an explorer app like root browser: https://play.google.com/store/apps/details?id=com.jrummy.root.browserfree&hl=en

open : system /app/KTHiddenMenu.apk

if you need the original files i can upload it

http://i.imgur.com/ULiSLwB.jpg

extract from the apk:

seg000:000011F1 0000000C C \t\tWCDMA 850

seg000:000011FF 00000007 C LTE B3

seg000:00001208 00000011 C LTE B3 Preferred

seg000:0000121B 00000007 C LTE B7

seg000:00001224 00000007 C LTE B8

seg000:0000122D 00000011 C LTE B8 Preferred

seg000:0000123E 0000000A C \a\aLTE B17

seg000:00001248 0000000A C \a\aLTE ALL

seg000:00001252 0000000D C \n\nWCDMA 1900

seg000:0000125F 0000000D C \n\nWCDMA 2100

seg000:0000126C 0000000C C \t\tWCDMA ALL

seg000:00001278 0000000A C \a\aGSM 900

seg000:00001282 0000000B C \b\bGSM 1800

seg000:0000128D 0000000B C \b\bGSM 1900

seg000:00001298 0000000A C \a\aGSM ALL

seg000:000012A4 00000007 C LTE B1

seg:000012FC 0000000D C \n\nWCDMA ONLY

seg000:00001309 0000000B C \b\bLTE ONLY

seg000:0000132C 00000011 C LTE B3 preferred

seg000:0000133F 00000011 C LTE B3/WCDMA/GSM

seg000:00001352 00000011 C LTE B8/WCDMA/GSM

and

seg000:000017BC 00000020 C Network Setting/1. Network mode

seg000:000017DC 00000024 C !!Network Setting/2. Service domain

seg000:00001800 00000025 C ""Network Setting/3. Channel setting

seg000:00001825 00000029 C &&Network Setting/4. LTE Channel setting

seg000:0000184E 00000023 C Network Setting/5. Security mode

seg000:00001873 00000020 C Network Setting/6. HSPA setting

seg000:00001893 0000002D C **Network Setting/7. Delete Stored Cell List

seg000:000018C2 0000001F C Network Setting/8. GCF setting

seg000:000018E3 00000013 C Insert a Test Card

seg000:000018F6 0000001E C \x1B\x1BNetwork Setting/9. CA OnOff

seg000:00001914 0000002E C ++Network Setting/10. LTE RRC Version setting

regards
[Galaxy S 5 General] Hongdae:
Thanks! How do you get the info from those values? Btw my phone is a G906S so I have the app SKTHiddenMenu instead, I guess it is the same. I have extracted the apk files but didn't find that information!
[Galaxy S 5 General] _sadpanda:
g900t need not apply?

So I followed one of the other guides and when I got to:

13. Right click on ServiceProg.exe > run as administrator.

14. Choose Phone > Read from phone > UMTS System. This will show which 3G bands are currently enabled. Add checkmarks to the additional 3G bands that you would like to add.

ALL of the bands came back selected....

So I stopped. Anyone else seeing this?
[Galaxy S 5 General] botwa2000:
What phone/model do you have?

What was your goal - unlock 3G bands only or also LTE?

Did you check the 3G bands shown in Service Prog vs. your phone specs - perhaps it already natively supports all those listed bands?

Another place to view your 3G bands is NV 01877.
[Galaxy S 5 General] _sadpanda:
SM-G900T

I'm heading to Europe and wanted to make sure ALL bands were enabled

is there a way to pull up the service prog from CM12? I think I would have to revert back to the stock rom to pull it up.
[Galaxy S 5 General] Sepero:
You can access all secret menus as Root with the app Shortcut Master

Sorry, I don't remember what to search to find Service Prog. Hopefully someone else can help
[Galaxy S 5 General] _sadpanda:
actually no. it only pulls 15 codes and of them only 4636 brings up anything remotely useful.... it is some testing dialog that includes the phone info (preferred network type).
[Galaxy S 5 General] botwa2000:
Are you on T-Mobile? Then you should be fine on 2G, 3G and LTE in many European counties by default. Are you looking to unlock any particular frequency?

Sent from SM-G906K using XDA Premium app
[Galaxy S 5 General] genica:
Tried this method on g900f and no go. Even flashed my girlfriend g900t backup to mine to unlock lte band 17 and still no go. Has anyone gotten CDMA debug information in the debug screen? A list of options there in debug menu by pressing 1 in key input then back
[Galaxy S 5 General] botwa2000:
What did you backup from G900F? Rom? Qcn file?

Also can you tell what you mean by debug screen.
[Galaxy S 5 General] genica:
I flashed the QCN backup from a g900t to my g900f. In the service menu. by *#0011# hit back then type Q0 in key input will bring you a menu of options. Go to debug screen then CDMA debug information. It will say debug menu at the top. Now type 1 in key input and then hit back. It will give you a list of options
[Galaxy S 5 General] botwa2000:
Brave of you to flash a qcn from a different model:o

Did you verify that all NV changes stuck upon reboot?

Also are you in the coverage area with B17 i.e. able to confirm you don't actually have reception or just can't see the band in the service menu?

As I stated in my first post I haven't yet come across anyone who could add additional bands to their S5 and was able to share the successful working procedure... hoping you be the first!
[Galaxy S 5 General] genica:
I live on the edge

The NV values did indeed stick, at least the ones in this tut .

The t-mobile connects to B17 I have the same Sim. After the flash service didn't change. still only connected to band 2 and 5 no matter what rom I flash.

Stock G900F QCN backup size: 589kb

Stock G900T: 743kb

After flash G900F is: 646kb
[Galaxy S 5 General] genica:
Screen shot of that menu
[Galaxy S 5 General] Brenardo:
I have been following this. My wife purchased 900R4(US Cellular) and had it unlocked to use on Verizon. 1x and 3G work flawlessly but I have yet to figure out how to connect to LTE.

What would happen if you were to flash a modem from the carrier model who bands you are trying to connect to?

If that is stupid then disregard.

If I can help in anyway let me know.
[Galaxy S 5 General] botwa2000:
It's not a stupid thought but a dangerous one. Best case you'll unlock the desired bands, worst case you'll brick the phone.

I guess it'll depend on soft and hardware configuration of both models.
[Galaxy S 5 General] genica:
Success!! Lte defeated

G900F with working LTE in the USA
[Galaxy S 5 General] genica:
Screen shots
[Galaxy S 5 General] juDGEY2k10:
Hey mate, is that 4g/lte icon stock on your phone?
[Galaxy S 5 General] botwa2000:
Hi just so I understand. Your screenshot shows you're on LTE B2 which in 1900 MHz. According to G900F specs 1900 is supported by default.

Please can you share your steps exactly and what you achieved i. e. which bands you unlocked?
[Galaxy S 5 General] genica:
Jumped the gun al little and I apologize for any false hope. I confirmed I did not unlock any additional bands as previously thought.
[Galaxy S 5 General] TheSamWolf:
Is it known exactly which partition(s) are modified in this process? Perhaps those partition(s) could be backed-up, and simply restored if modification doesn't appear to improve cellular bands.
[Galaxy S 5 General] botwa2000:
You always can (and should) note the individual NV values before you overwrite them as this is a manual one-by-one edit process. So you'll be able to restore everything you change.

Alternatively you can perform a bulk backup via EFS Professional or QPST Service Prog.
[Galaxy S 5 General] androidrouen:
oh i see you use other line that line 1877 ? 1877 alone is not good ?

yes but we don't have a service code that say ''active band = ...
[Galaxy S 5 General] botwa2000:
LTE lines are 6828 and 6829.

If you're actually receiving LTE connection you should see in the service menu something like that (note the 1st line)
[Galaxy S 5 General] androidrouen:
yes but you don't see ALL band enabled in your phone ^^ and if i just edited line 1877 it is not enought ? i should do line 6828 and 6829 ? ...

here is what i see :
[Galaxy S 5 General] botwa2000:
If you can follow the steps at the end of the first post you'll be able to see something like this
[Galaxy S 5 General] egejo:
So Just to quickly summarize...these really interesting topic.

After reading [MENTION=5353566]fffft[/MENTION] thread 60+ pages.. and these one.

I could just resume that there is no actual “GUIDE” to enable LTE bands outside of the factory enable ones on G900F? and the only testing and results have been bricked phones or no service or no changes at all…

I'm wrong or I could enable band 4 on my G900F safely actually following these guide and editing just NV 06828 and 06829?

I'm just interested because here is only band 4 is used so without it enable is just like any 3G phone out there and I will have to sell it and change to have LTE…

I have followed the guide till you run QPST Service Programming, read the phone and could see UMTS System…after that with both NV manager or QXDM could not establish connection to the phone so I could not read/edit 06828 and 06829 but don’t know if keep trying or just let it as that after Reading all these post…

So Just to quicly summarize...

After reading [MENTION=5353566]fffft[/MENTION] thread 60 pages.. and these one.

I could just resume that there is no actual guide to enable LTE bands outside of the factory enable ones on G900F? and the only test and results have been bricked phones or no service or no changes at all.

I'm wrong or I could enable band 4 on my G900F actually?

I'm just interested in doing that and if it work
[Galaxy S 5 General] botwa2000:
The possibility of a brick is always present though a lot of people including myself could follow the steps and didn't brick their devices. Mind you, you can brick your phone by simply rooting it if you do it wrong way.

It is my understanding that you should be able to unlock certain frequencies on certain models as it was proven for Nexus 5. I can't tell if B4 is unlockable on your model but please do report back if you decide to try.

Make sure you run QXDM as administrator.
[Galaxy S 5 General] egejo:
Ok so I decided to give the guide a shoot...

So I did follow guide I'm on a G900F with Phoenix Rom and kernel loaded

Everything was ok, I run QXDM and after a step missing in the guide setting up the Com port connection I was able to connect.

Then I was able to read 06828 then triple click it and write my custom value directly on QXDM, I did not write first 0, I write directly the new value required.

I'm not adding neither any 3G band or any other mod at the time.

However 06829 was another story I can't even read it I get message "NV Status Error Received: Items Inactive" on QXDM, On NV Manager the list don't go up to 06828 neither 06829 so I could not test with it.

So I could not write 06829 as you see.

However I did test writing only 06828, restarting the phone everything looks ok but no 4g LTE only H+, read from the phone the NV value was still there written after reboot, but under secret menu band list the original bands was still displayed no changes there. Right now I restored the NV value to normal.

Any inputs Why I get these error on 06829 only... the Rom and phone is complete LTE enable as far as I know...

These was close try, hope I could and so others later ;)

Edit: I'm trying in Windows 7 machine, no usb hubs and all programs run under admin privileges every time.
[Galaxy S 5 General] pabel101:
root

Im curious...can the Verizon version of the S5 be flashed to US Cellular
[Galaxy S 5 General] botwa2000:
To my knowledge such things can result in a total brick if you don't have experience with that. However some folks did manage to flash a baseband from one phone to another...
[Galaxy S 5 General] botwa2000:
What version of QXDM are you using?

As far as I know 6829 shows 0 as a default value though I'm curious if it's the case on your device as well.

What was your original value on 6828 and which one you input there?

Sent from SM-G906K using XDA Premium app
[Galaxy S 5 General] yakapa40:
[MENTION=6249686]egejo[/MENTION]

about NV6829 your ansewer is here post 7 : http://xdaforums.com/android/genera...s-qualcomm-t2950491/post57451518#post57451518

regards
[Galaxy S 5 General] egejo:
Thanks so it was no problem it is just as it is and it is inactive. So I could conclude that even after writting 6828 sucesfully the LTE band was not open on the G900F

Using QXDM 3.12.714

6829 could not be read as conclusion of inactive item as told above, so don't know it default value.

Original value on 6828 was 524503 (B1, B2, B3, B5, B7, B8, B20) and changed to 590047 (B1, B2, B3, B4, B5, B7, B8, B17, B20) but it actually did nothing.
[Galaxy S 5 General] yakapa40:
G900F original values ( extract with EFS professional) :

06826 (0x1AAA) - Inactive item

06827 (0x1AAB) - Inactive item

06828 (0x1AAC) - OK

D7 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

06829 (0x1AAD) - Inactive item

06830 (0x1AAE) - Inactive item

LTE bands: 1,2,3,5,7,8,20

regards
[Galaxy S 5 General] botwa2000:
Somehow the edit of 6828 / 9 alone doesn't add further LTE bands. Not even into the service menu.

There must be other NVs responsible for that.
[Galaxy S 5 General] Isriam:
just so you know, i have the exact phone and did the exact same process with the exact same results. g900f cannot be band unlocked with this guide yet because something is missing still. not sure what, and i've given up until i buy my next phone :)
[Galaxy S 5 General] botwa2000:
Hey [MENTION=336579]Isriam[/MENTION] long time no speak:) I know that on Nexus models extra LTE bands can be added but only some specific ones, not all. Therefore I'd still encourage everyone to test this mode and perhaps there'll be a success eventually.

If you want to share what bands you wanted to add and failed I can mention it in the first post so that at least people don't waste their time on known failures.
[Galaxy S 5 General] yakapa40:
[MENTION=6021435]botwa2000[/MENTION]

what i think about service menu:

it's generate by modem.bin at the first device boot and only for informations

exemple with my G900F

i'm working on it but i need more time ( service menu depending on versions and firmwares with a same device )

regards
[Galaxy S 5 General] botwa2000:
Cheers, good stuff! Let me know if you'd like me to send you my partition... just you'd have to tell me how to extract/download.
[Galaxy S 5 General] horpah:
Quick question. Is this worthy to switch from S3 to S5? I'm using S3 with Archidroid Rom.
[Galaxy S 5 General] yakapa40:
[MENTION=6021435]botwa2000[/MENTION]

tell me witch firmware you have i'll i'll extract it

exemple:

G900FXXU1ANJ1_G900FOXX1ANJ1_XEF tar.md5 /unzip with 7zip or winrar

open modem.bin with: IDA free ( or another disassembler)

regards
[Galaxy S 5 General] botwa2000:
It's a totally wrong forum, pal. When you get yourself a S5 and want to edit LTE bands then you'll have come to the right place;)
[Galaxy S 5 General] botwa2000:
Here you go...