[OnePlus 3 Guides, News, & Discussion] otonieru:
I gonna try to clean up the first post,

so i move all previous update to 2nd post :

[GUIDE] [How To] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3 (Band 5 confirmed WORK)

UPDATE 6 : Based on guidance from Baska, i re-tweak the QCN for more proper IMEI removal, please try again accordingly based on your needs :

WARNING : NOT COMPATIBLE WITH 4.1.0

UPDATE 5 : I managed to create EASY WAY to unlock necessary Bands, - you can skip all the steps in this post, except for the flashing RMT Storage Patch step. Thats the MAIN REQUIREMENT

UPDATE 4 : Thx to Baskaflyfer for his work in separating QCN, now we managed to Unlock Band 5 & 8 and Keep Our IMEI Intact - New QCN for Band 5 & 8 ADDED to Download Section

Update 1 : I reupload the QCN with safety precaution so that you can input your own IMEI to prevent accidental IMEI overwritten

- this solution is no longer working for OnePlus

Update 2 : I found that in order to use Band 3, we need to use A3000CN QCN as base. Meanwhile, if we want to use band 5, 8 and possibly 20, we need to use A3003 base. So please download according to your needs

Update 3 :

I had confirmed Band 3, 5, 8 and 40 are all workings in my A3000

Another GOOD NEWS is :

[MENTION=5795157]allluke[/MENTION] & [MENTION=7369550]koko21341[/MENTION] confirmed that Band 3 is UNLOCKED and USABLE in their US variants

So after trying so many ways (Thx to [MENTION=7846474]baskaflyfer[/MENTION] who manage to bring back my courage to tinker on this), simple and hard one to unlock additional LTE Bands on our beloved A3000 to match the one from A3003

also credit to [MENTION=4258980]devilsshadow[/MENTION] & [MENTION=5061839]Albirew[/MENTION] who bring the initial & original way of unlocking extra bands for us all

and extra thanks to :

Thanks to [MENTION=5733862]BlackSoulxxx[/MENTION] for his original work with the Qualcomm baseband software and for the modified OnePlus Drivers

Thanks to [MENTION=4300205]olokos[/MENTION] for his original tutorial

Thanks to [MENTION=265575]fards[/MENTION] for finding the diagnostics command that made all this possible

also thanks to this japanese guy here : https://logicalmemo.net/2016/10/19/post-300/ that enlighten all of us regarding the static_nvbk.bin modification so that we can begin to tinker with the NV value on our OP3

I finally (kinda) found a way to unlock more bands

WARNING : Do THIS WITH YOUR OWN RISK, I am not responsible for any harm that can happen during the process of unlocking the LTE BANDS, ALWAYS MAKE BACKUP FIRST

First, what you gonna need to have are :

1. Qualcomm Diag Driver - Here - i mod the HTC driver, you can use your own driver if you have one

2. Marshmallow ROM with DIAG capability (example : mine done on [MENTION=4898097]arter97[/MENTION] CM13, but OOS is perfectly fine)

3. QPST - please find it yourself, i got mine from company, and i wont share link to cracked version here

4. DFS Tool - Here

5. PC (Win 7 64 preferable) with ADB n fastboot driver installed - Minimal ADB Download Here

6. Dedicated QCN for Each Needed Band, Currently we only managed to Get Working QCN for Band 5 & 8 -

Band 5 & 8 QCN - Download Here

7. HEX Editor to insert your own IMEI - Here

8. Unlocked BL & Rooted device with TWRP Recovery Installed - I assume every of OP3 users know how to do this, or kind enough to find the way by themself

9. Network Signal Guru App from PlayStore

10. Rmt Storage Patch Zip (credit to [MENTION=7846474]baskaflyfer[/MENTION]) - Here *for Nougat Users & Op3T users, use this one instead : Rmt Storage Patch 4.x --> This (probably) wont work on firmware newer than OB9, latest tested is on 4.0.3

Ok, here we Go !

1. First, copy the rmt storage patch zip from list number 9 above to your internal storage of OP3

2. Boot into TWRP, do BACKUP for your EFS partition, then continue with flashing that zip

3. Reboot into system, and you should get warning about EFS Partition mismatch, ignore or closed that warning (i choose to ignore it forever, so it wont annoy me upon reboot)

4. Now open up your CMD and run this ADB command :

5. Now your devices wil either detected as unknown device (or Qualcomm Diag Port/USB Modem if you already have the diag driver) on Device Manager

6. Install the driver from requirement list number one, and you will have "HTC USB Modem" listed in your device manager (skip this step, if you already have your own qualcomm usb diag driver instaled)

7. Now fire up QPST and go to "Port" tab, and choose "Add New Port" ,

8. On "Serial/USB Port" tab, unchecked the option of "Show Serial & USB...bl bla bla" option, you will see your phone listed there as a "COM#" (# is a number depending on your PC) choose it, and click "OK"

9. Now choose "Start Clients" from the Menu tab above, and choose "Software Download"

10. Airplane Mode your Phone

11. Now open the HEX Editor, and open either the A3003 or A3000CN QCN file (depends on which bands you want to unlock) you have downloaded, and find this entry AA AA AA AA AA AA AA AA and replace it with your own 16 digit of IMEI in a HEX format (use online IMEI to HEX converter if you don't know how to do so or use this App : https://drive.google.com/file/d/0B09fj-nvjJeodlVaZHdVb29RaHc/view?usp=sharing ) and SAVE AS the file somewhere you can easily find. - this info is obsolete now

For the 2nd IMEI number you can search for 88 00 01 00 26 02 00 00 then the hex after is the IMEI, so you can just replace that with your 2nd IMEI number - Thx to [MENTION=5523365]DarkN3ss61[/MENTION] for the findings

WARNING : WHEN INPUTTING YOUR IMEI, PLEASE MAKE SURE YOU INPUT THE HEX VALUE OF YOUR IMEI, NOT THE IMEI NUMBER ITSELF, ELSE YOU MIGHT INJECTING A RANDOM IMEI TO YOUR DEVICES

12. Choose "Restore" Tab, and click browse for QCN file, and look for the QCN you have downloaded from requirement list Number 6

13. Check "Allow phone/ESN mismatch"

14. Click "Start" and wait for the process to complete

15. After complete, wait 30 Seconds (for curing time), close QPST and reboot your phone

16. Once it fully boot, open back your CMD and re-run command from step number 4 to re-open your DIAG port

17. After the port opened and detected, open your DFS Tool (downloaded from requirement list number 4)

18 . If it ask for login just close the window

19. You will see your device listed in "Port" tab, double click it to trigger connection

20. Once you see "Device in diagnostic Mode" in DFS log windows, go to "Bands" tab

21. Choose "LTE" Tab

22. Choose "LTE BC Config" on the right side

23. Click "Read" and see, confirm first that u have all the A3003 LTE bands activated, IF NOT, REPEAT STEP 1 to 14

24. If you can confirm that the default Band of A3003 already Opened/activated, now add more bands as you desired - by put a checkmark on it (remember that even if it enabled, your phone need hardware capability to connect - i only managed to try on band 5 & 8, my country has no others band, so please try it yourself and tell us here the result)

25. Once you done, click "WRITE"

26. Wait for the countdown process done, and check the log whether "Operation Completed" or not

27. Once everything is done. Wait again for 30 Seconds, and reboot your phone

28. After it fully booted, turn OFF the AIRPLANE Mode, and wait for the reception - it can take up to few minutes for the radio to get reception

29. Now, open up "Network Signal Guru" that you have downloaded from PlayStore, if it ask for Root Access, Grant it

30. Click the "Magic Wand" at the top bar, and choose "Band Locking"

31. Choose "LTE"

32. Now see, whether Bands you added is there or not. If NOT, CLICK AGAIN on the "Magic Wands" icon, and click "Clear All" and confirm the dialog that appear

33. After step 32, you should see that all Bands were added now !

NOW! Go out and try yourself whether you can manage to get a reception using your new bands.

TIPS : If you are sure that your area has certain bands, you can use "Network Signal Guru" Band Locking menu to disable some bands and only enable the one you want to test to check whether you can get reception or not. I used to disable all except band 5 & 26 to confirm whether the UNLOCK process is WORK or not. And IT WORK (see screenshot on 2nd post)

Screenshot :