yashsingh1/xdaforums huggingface dataset:
[Xiaomi Mi 5 Guides, News, & Discussion] TheUltrametricSpace:
So let the fun begin. Over the weekend, I'm going to be in the countryside, where B20 is active.​

I'm gonna disable all useful bands but B20 to make this easier. Will change it to the following.

2061584302149	00011110000000000000000000000000000001000101	1.3...7. 38-41 (Original)
2061584892127 00011110000000000000000010010000000011011111 12345.78 17 20 38-41 (The Goal)
2061584826368 00011110000000000000000010000000000000000000 20 38-41 (Testing)

That way it's pretty easy to see and easy to prove.

Result 3/24/2016 (Today)

​

No more 4G in Tromsø (a city in the north of Norway). Before I had 4G. I write this to document everything as good as possible, so that nobody can ***** around in the end. So if you have doubts of any kind, share it now.

Screenshot to prove this:
[Xiaomi Mi 5 Guides, News, & Discussion] twistedh:
My network uses all 3, 7 & 20 bands and coverage is good for me if I'm closer to the city (Copenhagen) but very unreliable when I'm at home. Band 20 would be very good to have so I'm waiting to see how it goes for you before I try.

Hope it works for you :)
[Xiaomi Mi 5 Guides, News, & Discussion] Joboy13:
What exactly do you mean? Do you mean, you had it before you changed the settings (with original settings) or after you made extra changes (added to changes you already did)? Just to be clear :)
[Xiaomi Mi 5 Guides, News, & Discussion] TheUltrametricSpace:
In Norway 4G works on Band 3,7 and 20.

The Mi 5 supports band 3 and 7 out of the box, so original NVRAM values.

Those bands aren't randomly chosen, they have a purpose. Band 3 and 7 is more traffic (crowded places) and B20 covers a wider area (countryside, less crowded).

I disabled Band 3, Band 7 and some more to be sure that I can't get 4G that way. So the only way to get 4G internet now is by band 20. That's the purpose of this test.

And now to why I had 4G before, Tromsø is a crowded place for Norway so there band 3 and / or band 7 are active. That's why I had 4G out of the box.
[Xiaomi Mi 5 Guides, News, & Discussion] Joboy13:
Oh, now I get it. You just wanted to be sure you didn't have B20 where you live? Alright. Then I'm looking forward to your tests this weekend and hope for a positive result!
[Xiaomi Mi 5 Guides, News, & Discussion] Em3ricZe:
In france, we have a website to localize Antenna and details ( see antennesmobiles.fr )

No equivalent website in your country ?
[Xiaomi Mi 5 Guides, News, & Discussion] fredda88:
I also follow your thread over at Miui and i hope that the reason for this "hack" to work in MI5 and not in MI4 is the PAM.

I belive the PAM in MI4 is the Avago ACPM-7600 supporting LTE bands 1,2(25),3,4,5/26 and 8.

And as i wrote earlier, in MI5 we have the skyworks 77646 supporting 1, 25, 3, 4, 39, 26, 8, 20, 12, 17 (and sub-bands 9, 10, 18, 19)

Holding my thumbs for this to work :good:
[Xiaomi Mi 5 Guides, News, & Discussion] tndb:
Im following this thread with great anticipation and I decided to try this aswell on my Redmi 3 which has SKY77643 which supposedly supports band20 but still no LTE coverage where I normally would have on a phone with band20 :( http://www.skyworksinc.com/Product/3065/SKY77643-11 according to the teardown http://geekchinalive.blogspot.se/2016/01/xiaomi-redmi-3-teardown-analysis.html

Used 2061584892127 for my LTE BC CONFIG where I normally have 2061584302149 but if anyone has any ideas, suggestions to try lemme know :)
[Xiaomi Mi 5 Guides, News, & Discussion] TheUltrametricSpace:
It doesn't help much, if I have all bands enabled someone will come up and say "But bla bla maybe you had 4G from another band but B20".

I disabled Band 3 and Band 7 to be 100% sure that I can not get 4G from those two! (So I just did this to have a clean test environment.)
[Xiaomi Mi 5 Guides, News, & Discussion] TheUltrametricSpace:
that's disappointing. What SoC is inside of the phone?
[Xiaomi Mi 5 Guides, News, & Discussion] elia222:
The redmi 3 has a snapdragon 616
[Xiaomi Mi 5 Guides, News, & Discussion] TheUltrametricSpace:
thanks for the info
[Xiaomi Mi 5 Guides, News, & Discussion] kiteman44:
.... Please read the first post. Work in progress. And its pretty sure mi max doesnt use same hw than our mi5
[Xiaomi Mi 5 Guides, News, & Discussion] fabioplata:
News for band 4?
[Xiaomi Mi 5 Guides, News, & Discussion] greasymonkey1960:
Nothing at present, need to understand what is going on with rffe_scan, it appears to control what bands are scanned when trying to receive signals.
[Xiaomi Mi 5 Guides, News, & Discussion] baskaflyfer:
Hi, it's me again, from the OnePlus 3 community

'rffe_scan' are identical, except for a one value. I highlighted it in red.

A3003

<NvEfsItem fullpathname="/rfc/rffe_scan/rffe_scan.dat" name="/rfc/rffe_scan/rffe_scan.dat" mapping="direct" encoding="dec" index="0">2,0,0,0,7,0,0,0,11,0,0,0,[COLOR="Red"]226[/COLOR],0,0,0,6,0,0,0,6,0,0,0,0,0,0,0,26,0,0,0,0,0,0,0,255,255,255,255,0,0,0,0,23,2,0,0,192,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,15,0,0,0,1,0,0,0,255,255,255,255,1,0,0,0,23,2,0,0,50,0,0,0,0,0,0,0,4,0,0,0,4,0,0,0,4,0,0,0,0,0,0,0,9,0,0,0,2,0,0,0,0,0,0,0,1,0,0,0,165,1,0,0,26,0,0,0,0,0,0,0,15,0,0,0,15,0,0,0,8,0,0,0,0,0,0,0,95,0,0,0,3,0,0,0,255,255,255,255,1,0,0,0,165,1,0,0,144,0,0,0,0,0,0,0,15,0,0,0,15,0,0,0,9,0,0,0,0,0,0,0,16,0,0,0,4,0,0,0,255,255,255,255,4,0,0,0,52,1,0,0,43,0,0,0,0,0,0,0,11,0,0,0,11,0,0,0,11,0,0,0,0,0,0,0,16,0,0,0,5,0,0,0,255,255,255,255,2,0,0,0,176,1,0,0,19,0,0,0,1,0,0,0,10,0,0,0,10,0,0,0,10,0,0,0,0,0,0,0</NvEfsItem>

A3000

<NvEfsItem fullpathname="/rfc/rffe_scan/rffe_scan.dat" name="/rfc/rffe_scan/rffe_scan.dat" mapping="direct" encoding="dec" index="0">2,0,0,0,7,0,0,0,11,0,0,0[COLOR="Red"],231[/COLOR],0,0,0,6,0,0,0,6,0,0,0,0,0,0,0,26,0,0,0,0,0,0,0,255,255,255,255,0,0,0,0,23,2,0,0,192,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,15,0,0,0,1,0,0,0,255,255,255,255,1,0,0,0,23,2,0,0,50,0,0,0,0,0,0,0,4,0,0,0,4,0,0,0,4,0,0,0,0,0,0,0,9,0,0,0,2,0,0,0,0,0,0,0,1,0,0,0,165,1,0,0,26,0,0,0,0,0,0,0,15,0,0,0,15,0,0,0,8,0,0,0,0,0,0,0,95,0,0,0,3,0,0,0,255,255,255,255,1,0,0,0,165,1,0,0,144,0,0,0,0,0,0,0,15,0,0,0,15,0,0,0,9,0,0,0,0,0,0,0,16,0,0,0,4,0,0,0,255,255,255,255,4,0,0,0,52,1,0,0,43,0,0,0,0,0,0,0,11,0,0,0,11,0,0,0,11,0,0,0,0,0,0,0,16,0,0,0,5,0,0,0,255,255,255,255,2,0,0,0,176,1,0,0,19,0,0,0,1,0,0,0,10,0,0,0,10,0,0,0,10,0,0,0,0,0,0,0</NvEfsItem>

It's the filter for the all permitted frequencies.

A sample scan is set here

A3003

<NvEfsItem fullpathname="/rfc/0[COLOR="Red"]226[/COLOR]/selfcal/dev0_fbrx_dc_cal_data.dat" name="/rfc/0[COLOR="Red"]226[/COLOR]/selfcal/dev0_fbrx_dc_cal_data.dat" mapping="direct" encoding="dec" index="0">1,28,255,126,126</NvEfsItem>

or here

A3000

<NvEfsItem fullpathname="/rfc/0[COLOR="Red"]231[/COLOR]/selfcal/dev0_fbrx_dc_cal_data.dat" name="/rfc/0[COLOR="Red"]231[/COLOR]/selfcal/dev0_fbrx_dc_cal_data.dat" mapping="direct" encoding="dec" index="0">1,6,243,120,126</NvEfsItem>

Maybe I am wrong)))

Sorry for my English, I hope you understand what I mean:D
[Xiaomi Mi 5 Guides, News, & Discussion] greasymonkey1960:
No problems with understanding your English :) :good:

When I had a close look at the rffe_scan values of the Mi5 (No B20) Vs the ZUK Z2Pro (Mi5 bands + B20), it was interesting that there was one less segment or (repeat) block of values in the Mi5 and the number of repeat blocks for both were identical to the number of supported bands...... Also the Mi5 had two blocks that were set to 00 00 00 00 whereas the corresponding blocks in the Z2 Pro string had FF FF FF FF.

The 00 00 00 00 or FF FF FF FF values appear to be the switch control values for the filters - now I need to work out how to decode which are the applicable bits for switch addressing and their relationship to the bands from the rffe_scan strings.

The OP3 appears to function differently, i.e. they have all the applicable band filters enabled on all the models, and use the LTE Band_Pref (NV6828) value to set the available bands. This may be due to slighly different engineering philosophies and/or RF hardware used in the RF front end by the different UE manufacturers.

The values you have marked in red are the HW_ID numbers, they are needed as part of the rffe addressing schema.

The NV Item "/rfc/0231/selfcal/dev0_fbrx_dc_cal_data.dat" is for the self-calibration of the Feedback Receiver, using the fixed bands of B1, B7, B13, B17 and B40 (five frequencies bands, at both ends of the device operating spectrum, low { two in 700MHz}, one "mid" or "reference" band {2100MHz} and high {23/2400 & 2600MHz})

When you look at the cal values given (in the example >1,6,243,120,126<), they are grouped in this manner, two at the low band, one on the reference band, two at the high-band.

These will not impact the filter selection.

It is for a quick self-calibration of the receiver, before it actually starts the band-scan.

Once it locks onto a band, it then uses the RFNV values given in the relevant band's FBRX_DC_CAL_VAL, which provides more detailed and precise calibration for the selected band - these take into account the different operating bandwidths and also various technologies that are used on that particular band.

This is why you see both NV and RFNV items of the same name for B1, B13, B17, B40 and B7 in the .qcn files.

Cheers,

GM.
[Xiaomi Mi 5 Guides, News, & Discussion] pakidermo5000:
Thanks for the explanation. It is one step more to solve the mi5 enigma...
[Xiaomi Mi 5 Guides, News, & Discussion] fabioplata:
Yes, sure.. remember if you need a tester, I'm on it..
[Xiaomi Mi 5 Guides, News, & Discussion] greasymonkey1960:
Interesting Experiment

I did an experiment to see how the rffe_scan items impact the phone. and what sort of behaviour I would see.

The structure of the "segments" or "blocks" with the F F F F F or 0 0 0 0 fields behaved as expected - when they were set to 0's, the phone could not pick up any signal when scanning the bands after a re-start - all the filters were disabled.

I wrote some test .qcn files, turning on individual bands (Nº 1 of eight, Nº 2 of eight, etc), and whilst I had no control over the AGC in the Rx (a normal test constraint in Rx & Filter testing), and was dependent on a rather poor quality commercial network as my signal source, it was very clear from looking at the Rx SINR that B1 performed best with Nº 1 filter enabled, B5 was best at filter Nº 4 or 5, and both failed to even get service on filter Nº 8.

It is a pity that I do not have any B7 here in Manila to test against......

One thing of note was that the third and fourth filter switches are set to 0 0 0 0 in the original Mi5 .qcn file, and judging on the measurements of the two known bands, and which filters gave the best result in terms of RX noise, it appears that the fourth filter switch may be influential in obtaining a workable signal for B20 (800MHz).

I need to do further study of the various bits of data in this NV Item to try and determine what might be needed to set the filters to B20 (if indeed possible......) - anyone with some insights into these values for rffe_scan, please help :)

I have the MIPI Alliance's V1.10 RFFE Interface Specification which has given some insight into how the MIPI Controller functions in these RF front-end devices, but am still stabbing in the dark when it comes to the Qualcomm implementation.

Cheers,

GM.
[Xiaomi Mi 5 Guides, News, & Discussion] baskaflyfer:
Nice work:good:

You are moving farther and farther:)

Maybe it help for you 52rd, but needed an invitation code, if you will get some useful information, can you share it. For me come in handy all that is connected with the calibration.

As it turned out that isn't so simple with the QCN for OP3(A3000), we also need to do the RF calibration. I will not explain everything, so as a thread for Mi5:D

Can you point me from where to start for the RF calibration??? I decided to do this;)
[Xiaomi Mi 5 Guides, News, & Discussion] pakidermo5000:
You can explain it, it is mi5 thread but the problem is common to different phones so it is not offtopic. Basically, we are on the same boat here, and we hope to learn from the different communities.

Why do you need to do the calibration ? Can't you use the one from A3003?

---------- Post added at 06:02 PM ---------- Previous post was at 05:45 PM ----------

The link 52rd is amazing !!! The first time I find a forum where people talk about these things.
[Xiaomi Mi 5 Guides, News, & Discussion] xsiriusx:
Hello everyone, possessor of mi5s, I came to a conclusion the problem, the B20 is not disabled and has no hardware limitation (Vodafone Italy, in my case I need this), but it is not set anything relating to the b20, around I found this version of qxrd Professional, which gives me access to all the nvRAM values, which are not visible and not settable with the normal qxrd. I noticed that as you mentioned earlier are not sett all the work on the B20 under the LTE RF voice Nvbrowser, my idea was to copy the values from another terminal with MSM89996 and copy them on my own but I do not have this possibility. In fact if sailing NVbrowser of qxrd professional, you will notice that the b20 has no type of setting. sorry for my english I hope to do something useful are the links of qxrd and QPST.

http://www.androidbrick.com/download/qualcomm-qxdm-pro-3-14-594-32-64bit/

http://www.androidbrick.com/download/unbrick-qualcomm-qpst-2-7-437-latest-qfil-qualcomm-flasher-2/

Careful when activated and used qxrd set screen system date to December 2013.

QPST start with administrator privileges directly in the path C: Progemmi / qualcomm / QPST / bin otherwise in my case did not work

Sorry for my english,

I hope I was able to explain
[Xiaomi Mi 5 Guides, News, & Discussion] greasymonkey1960:
HI,

I will try to write a post on the methods I have used for developing the RF cal curves for the Mi5, as I do not have the luxury of a lab full of test equipment to do the RF sweeps.....

It will be on the weekend I expect, "real-life" is interfering with my time to play around with hacking Mi5's and writing on the forum.

Cheers,

GM.

---------- Post added at 03:36 PM ---------- Previous post was at 03:30 PM ----------

Hi,

There is a huge amount of work been done on exploring this topic, and the required Qualcomm tools are well known.

I know the thread is quite lengthy, but if you read through it and gain an appreciation for the detailed technical information on this subject, you will be well served.

Cheers,

GM.
[Xiaomi Mi 5 Guides, News, & Discussion] pakidermo5000:
Please, remove links to download software from xda or the devs will close the thread.

Then, second you may want to read this http://xdaforums.com/showpost.php?p=68981835&postcount=373 as was the beginning of what we are doing here. Then, if you follow the thread from there you will see the progress and problems we are finding.

I am also interested in B20 for Italy vodafone.
[Xiaomi Mi 5 Guides, News, & Discussion] baskaflyfer:
Hi guys, I wasn't come here during the week.

i Just watched, couldn't answer without a translator, although translator is an useless.

I tested the mod QCN for a week, I changed the values in the NvItems and the result is zero.

I'm a FOOL. I did it all at this official Nougat. I have done the nvbkstatic, which allows me to change the NvRam. Today I just noticed that it does'n't change some values in NvRam. It's needed patched_rmt_storage, i have no time to do it for the Nougat, It's not so easy.

I returned back to CM13, for which I have a patched_rmt_storage.

I just tested it all in vain:(. i lose almost two weeks. it's offensively, I don't know how to swear in English(((

HI, @greasymonkey1960 I'll ask a couple of questions on Monday or Tuesday. I think you're really able to explain to me about hw_id, maybe it will a bad news for OP3???

Hi, @pakidermo5000.

I try to explain, but it's hard for me, I'm from Russia, i can understand what are you write. but answer it will complicated for me

my english is poor...

About the calibration it just my opinion, if I can, then I will explain it all on Monday or Tuesday

Thank you guys for your work, I learned a lot from your thread:good:

And thank you for this, i'll be waiting it
[Xiaomi Mi 5 Guides, News, & Discussion] greasymonkey1960:
A quick note on Nougat (android 7), I have updated my Mi5's to the MIUI8 flavour of Nougat, NVRAM items are all still accessible - I am using the xiaomi_eu dev ROM, 6.12.8.
[Xiaomi Mi 5 Guides, News, & Discussion] baskaflyfer:
For you, it's easier, but we(OP3) need to think about saving the values in the NvRam for our phone:D
[Xiaomi Mi 5 Guides, News, & Discussion] greasymonkey1960:
Something to keep you busy......:angel:
[Xiaomi Mi 5 Guides, News, & Discussion] baskaflyfer:
And i'm sorry again, that I got into the your process by unlocking LTE, but it seems to me that you must originally to check whether your device supports the B20. I did it for the OP3(A3000), and proved that it supports B20. It seems strange that you started with the end - by creating a new B20 for the Mi 5, to ensure that the B20 are work, you need to add any value B20 from the another phone, it does not matter which will the phone. And most importantly, you must find, what NvItems are responsible for the inclusion of band20!!!

6828 - didn't help for you, i'm sure. It creates the only semblance of work the B20.
[Xiaomi Mi 5 Guides, News, & Discussion] greasymonkey1960:
When myself and Pakidermo5000 got involved in this exercise, we knew that the Mi5 may not ever work with B20 - for myself, it was an interesting exercise to see how far we could get with it., and I do not believe we are at "the end of the road" yet.

The NV6828 setting is critical, without the band configured there, no band will work.

Trying to hack lines of NVRAM from other phones is useless, we have done multiple device comparisons, the calibration files very rarely even have the same number of samples, as this is dependent on how "fine" or "coarse" the manufacturer wishes to make the calibration.

Also the way the calibration files are made is by taking a Mean value established by do the calibration on many phones of the same model, different silicon batches, etc, to create a so-called "Golden File", often results in vastly different results, as we noted with the OP3, ZUK2 and Mi5.

To do blind copy and paste is just being a "happy hacker", and not applying any technical knowledge or judgement to the task, often results in bricked "barbeques".

If I never get it to work, so what? If I never tried it I would be poorer in terms of knowledge, and of never having conversed with some great people.

Maybe when the Mi6 comes out with full international band selection, we can see what we missed out on, and then get it working - who knows.
[Xiaomi Mi 5 Guides, News, & Discussion] baskaflyfer:
Okay, I understood you:good:

You will have a hard work.

And knowledges are always welcome. :o
[Xiaomi Mi 5 Guides, News, & Discussion] pakidermo5000:
What we did was an action of caution. It was not sure what could happen when you modify the current parameters of the power amplifiers, so we wanted to be as accurate as possible. Yes, it was a long road, but now it is done. If you input the " wrong" values and it does not work, you don't know if it does not work because of the values, or because it just needs something else. We would have ended up in the same situation.

however, flasihng the OP3 values was always an option, but the last shot.

I have learnt a lot during the process and enjoyed sharing the way with [MENTION=7046981]greasymonkey1960[/MENTION], who is a master in RF.

Let's see what the mi6 brings us... but I think the competence is being quite fierce in this segment. Xiaomi needs to think it well. Now is competing with Zuk Z2, OP3, and maybe Zenfone 3. But the next step is already the big ones, S7, LG G5, Huawei P9. Selling the note 2 at 600eur is nonsense. You can find S7 for less, and now Huawei P9 can be found for around 350eur. So, it will be difficult for Xiaomi to catch attention in a segment like this. Let's remember that with these 3, everything works, there is no need of software updates to make the fingerprint work properly, and they are google-friendly... and have great cameras and conectivity. I expect mi6 to be more of the same, maybe with a version with B20, but probably will be so expensive that will be better to buy an S8...
[Xiaomi Mi 5 Guides, News, & Discussion] BPSoft:
Probably a stupid question but... since band 20 are available in Mi Note 2, what will happen if we flash that baseband on Mi5 or Mi5s?

As i've understood we'll probably have an antenna behavior mismatch that could lead to a no signal mobile, but It's a move that will put our hardware at risk?
[Xiaomi Mi 5 Guides, News, & Discussion] greasymonkey1960:
The baseband will most likey not work in the Mi5 as it will have a different HW_ID, 220 is the Mi5 HW_ID - this number is part of the addressing scheme for rffe and other MIPI buss devices/protocols, so the software has to have the same code as the HW.

Antenna matching is pre-set with the antenna switch, the big risk is the RF calibration data being significantly different. The PA then operates in a non-linear manner, generating much greater heat, giving you a BBQ'd brick.....

Cheers,

GM.
[Xiaomi Mi 5 Guides, News, & Discussion] acemimerakli:
band 20

WWW.GIZBEAT. COM says Mi5C Telephone Produced and support BAND20 (800 MHZ)

---------- Post added at 03:58 PM ---------- Previous post was at 03:54 PM ----------

WWW.GIZBEAT. COM says Mi5C Telephone produced and BAND20 (800 MHZ) supported. Expert friends can also take a look at this device and find a solution for mi5.
[Xiaomi Mi 5 Guides, News, & Discussion] BPSoft:
Thank you [MENTION=7046981]greasymonkey1960[/MENTION]

I will just give my take on this :P assuming Mi5, Mi5s and Mi Note 2 have the same network parts except the antenna/antenna board.

If i'm not wrong the antenna board is responsable to match the antenna load impedance to the output impedance of the transmitter this is done to maximize the power dissipated on the antenna.

This is just like we match the speaker impedance (4/8/16ohm) to the audio amplifier output impedance.

Since the transmitter is the same between Mi5, Mi5s, Mi Note 2 (and others), the transmitter impedance is the same and the antenna board just depends of the antenna.

Almost sure the antenna between this devices are different, and in consequence they should have different antenna board circuits.

1- If they are the same, i think we could use Mi Note 2 adjustment values because network hardware design would be the same on those devices.

2- If different (as it should), it's just not simplier to use Mi Note 2 values adjusted to our RL circuit/antenna board? For example scale up/down PA values at all frequencies.

3- Another possibility is to analyse what adjustment values Mi Note 2 has in common with mi5, if it's a close match, there is no reason to expect B20 different values.

Between this 3 points, the second one is the hardest approach, because we know the frequency response is not linear, couldn't we just compare 800Mhz bands of both mobiles and predict safe values for band 20?

At least to determine a safe PA max that will not burn our device.

I think point 3 and 1 are linked, a calibration match between devices should represent a similar antenna board, but i think it's worth to check both possibilities.