The perfect way to change SPC to zeros for majority of Qualcomm devices ( Exclusive ) - Hardware Hacking General

hi
In this Blog we will explain how the SPC is filtered for all Qualcomm devices. This method is applicable for all Qualcomm devices available in the markets such as ZTE-ALCATEL- SMASUNG - umax - Kyocera
First, the device must be in DIAG mode, the device DIAG port will be recognized in device manager
Second: You should have any program that sends DM commands via COM serial as directly as DFS version 13.9.19 .You can download it from the following link
Setup DFS 13.9.29.0
Third: Open the DFS program and connect to the specified port and then try to enter the spc code six zeroes you will find that the phone is not responding .Now copy the code in the bottom and paste in the CMD box in the dfs tool and click CMD icon you will see a Request and Responce words in a light blue color on dfs log window
Code:
4B0B24005D0200000E00550006003030303030300B3E7E
Forth: enter six zeros (000000) in SPC box and click SPC icon , the light blue DEVICE UNLOCKED words will be shown on dfs log window
The operation completed successfully
https://youtu.be/5F-icMnxbLE
===================
follow us on our official page
https://bassye.com
or on Facebook page
 @yemenbases

Related

MSL/SPC for Defy XT557

I'm trying to discover the SPC/MSL for my Defy XT557 (Republic Wireless) in order to obtain root. Can flip the phone into DIAG mode using SUT LR and open a COM port, which is then recognized by CDMA WS and DFS cdmatool, but cannot even obtain a successful memory scan or dump using those programs. Radiocomm gives a green circle but no RDELEM hex readout. getprop ril.MSL readout is empty, and alogcat while entering diagnostic phone codes does not show the MSL.
Any ideas would be greatly appreciated.
So I'm thinking at this point that we should wait for the OTA in January and then we might be able to piggyback onto that... Obviously the update will be signed, so we won't be able to modify and then apply it but... we might be able to log enough of the process that we could get lucky and get the info we need to hack this sucker.
has there been any progress in the XT557...
ejlmd said:
I'm trying to discover the SPC/MSL for my Defy XT557 (Republic Wireless) in order to obtain root. Can flip the phone into DIAG mode using SUT LR and open a COM port, which is then recognized by CDMA WS and DFS cdmatool, but cannot even obtain a successful memory scan or dump using those programs. Radiocomm gives a green circle but no RDELEM hex readout. getprop ril.MSL readout is empty, and alogcat while entering diagnostic phone codes does not show the MSL.
Any ideas would be greatly appreciated.
Click to expand...
Click to collapse
How do you get the phone into diag mode using SUT LR? I have installed SUT LR and it detects a phone, but I don't see how to open a com port. I checked the device manage and it only had COM1. Thanks for your help.
How do I put my Defy XT in DIAG mode? sut lr not detects phone...
ejlmd said:
I'm trying to discover the SPC/MSL for my Defy XT557 (Republic Wireless) in order to obtain root. Can flip the phone into DIAG mode using SUT LR and open a COM port, which is then recognized by CDMA WS and DFS cdmatool, but cannot even obtain a successful memory scan or dump using those programs. Radiocomm gives a green circle but no RDELEM hex readout. getprop ril.MSL readout is empty, and alogcat while entering diagnostic phone codes does not show the MSL.
Any ideas would be greatly appreciated.
Click to expand...
Click to collapse
how you get diag mode with SUT LR???
3a4yI7aTiY said:
how you get diag mode with SUT LR???
Click to expand...
Click to collapse
Sorry, I no longer own the phone. But in any case it seemed like a dead end.
The following was posted on one of the Republic Wireless forums regarding obtaining carrier info from a rooted Defy XT 557:
For anyone trying to get information from CDMA Workshop or get info DIAG mode, you can gain access by doing the following:
change the value of /sys/class/usb_composite/diag to 1
I did this using root explorer and edited the value using text editor.
you can then connect without SPC and click read to view most settings (probably enough to cl*ne if wanted).
It also looks like data in the NV Dump file showed data connection info of:
[email protected]
hcm.sprintpcs.com

imei changed using QPST Qualcomm config !!

so i bought my set second handed d802 but when i checked its imei no it showed 15 digit no and then i checked it in
different sites to see what firmware i was using ...
https://imeidata.net/warranty/lg
when i checked it showed nothing there .... no result
when i try to update it showed "NOT REGISTERED YET"
i thought it was an faulty imei no
so i popped up the back cover and check the printed imei no on the back side ......
YEAH IT WAS DIFFERENT
i check that imei no ..in the website showed the right model
then i used the following method to change my imei number
I found this some where here in XDA which was triggered to restore imei no . I
used this to change my imei thanks who wrote those steps ...made some changes too
Make sure your LG G2 is running the stock LG firmware. If your phone does not have official firmware installed on it, restore it to stock first.
Install the latest LG USB drivers on your computer: link is given below the thread
Now download the IMEI converter tool and unzip it: link is given below the thread
Download QPST (Qualcomm Product Support Tools) and unzip it: link is given below the thread
Open the QPST_2.7_378 and run the setup file to install it on your computer.
Enable USB debugging on your LG G2. You can find this option under Settings> Developer options. To enable Developer options on your device, follow the instructions given here.
Connect your device to the computer. And put it on PC suit mode note : port doesnot appear if it is in mtp pr ptp modes
Run QPST configuration and click on Ports tab. Click on Add new port option.
Your current port should show as COM4/5.
Select the port and click OK. The port should come up on active phones.
Select the phone and click the Software Download option from Start clients menu.
Now click on Backup tab. You should see your phone’s port.
Click on Start to initiate backup.
Now navigate to C:/ Program Files/ qualcomm/ qpst/bin folder.
Run RF_NV_Manager.
Click File> Read from phone. Your phone’s IMEI number should appear on number 550; NV_IMEI_I *the worng imei *
Click on item 550. You would see 9 fileds with the hex codes *wrong hex code or imei hex code*
Now run IMEI Converter.exe.
Now type your phone’s IMEI (which was in your back cover )in Enter IMEI field.
Then click on <Convert IMEI> button.
You should see 18 digits in groups of 9. *hex*
In RF_NV_Manager program, click on Hex by Write NV button.
In the 9 boxes, edit the numbers from IMEI converter starting from left to right . Type in first group of two numbers in the first field, then go to the next field and type in second 2 digits.
When you are done with doing this, click on Write NV option.
Then click File> Read from phone.
Item number 550 should appear now.
Disconnect the USB cable and reboot it.
Open phone’s dialer and dial *#06#. You should see your phone’s IMEI now.
Now check updates
credit goes to the one who wrote this orginally
links
check imei here--> https://imeidata.net/warranty/lg
get lg usb driver ---> http://g2-lg.com/download-lg-g2-android-usb-drivers-ver-3-10/
https://drive.google.com/folderview?id=0B_NvFkRRo5RxREZoRmg5VTVsek0&usp=sharing
# copy rights to the author's
#sharing is caring
#thankyou
Thanks for sharing! Will help someone in need
IMEI converter is specified as virus in Google drive. Any other link
caldent said:
IMEI converter is specified as virus in Google drive. Any other link
Click to expand...
Click to collapse
I have a LS980, I have successfully restore IMEI but other values luke MEID, MIN Dex Hex are still unknown or Wrong.
And in Network. Info "Service disabled" showed.
axeronb said:
so i bought my set second handed d802 but when i checked its imei no it showed 15 digit no and then i checked it in
different sites to see what firmware i was using ...
https://imeidata.net/warranty/lg
when i checked it showed nothing there .... no result
when i try to update it showed "NOT REGISTERED YET"
i thought it was an faulty imei no
so i popped up the back cover and check the printed imei no on the back side ......
YEAH IT WAS DIFFERENT
i check that imei no ..in the website showed the right model
then i used the following method to change my imei number
I found this some where here in XDA which was triggered to restore imei no . I
used this to change my imei thanks who wrote those steps ...made some changes too
Make sure your LG G2 is running the stock LG firmware. If your phone does not have official firmware installed on it, restore it to stock first.
Install the latest LG USB drivers on your computer: link is given below the thread
Now download the IMEI converter tool and unzip it: link is given below the thread
Download QPST (Qualcomm Product Support Tools) and unzip it: link is given below the thread
Open the QPST_2.7_378 and run the setup file to install it on your computer.
Enable USB debugging on your LG G2. You can find this option under Settings> Developer options. To enable Developer options on your device, follow the instructions given here.
Connect your device to the computer. And put it on PC suit mode note : port doesnot appear if it is in mtp pr ptp modes
Run QPST configuration and click on Ports tab. Click on Add new port option.
Your current port should show as COM4/5.
Select the port and click OK. The port should come up on active phones.
Select the phone and click the Software Download option from Start clients menu.
Now click on Backup tab. You should see your phone’s port.
Click on Start to initiate backup.
Now navigate to C:/ Program Files/ qualcomm/ qpst/bin folder.
Run RF_NV_Manager.
Click File> Read from phone. Your phone’s IMEI number should appear on number 550; NV_IMEI_I *the worng imei *
Click on item 550. You would see 9 fileds with the hex codes *wrong hex code or imei hex code*
Now run IMEI Converter.exe.
Now type your phone’s IMEI (which was in your back cover )in Enter IMEI field.
Then click on <Convert IMEI> button.
You should see 18 digits in groups of 9. *hex*
In RF_NV_Manager program, click on Hex by Write NV button.
In the 9 boxes, edit the numbers from IMEI converter starting from left to right . Type in first group of two numbers in the first field, then go to the next field and type in second 2 digits.
When you are done with doing this, click on Write NV option.
Then click File> Read from phone.
Item number 550 should appear now.
Disconnect the USB cable and reboot it.
Open phone’s dialer and dial *#06#. You should see your phone’s IMEI now.
Now check updates
credit goes to the one who wrote this orginally
Click to expand...
Click to collapse
Was your phone rooted ?

[Guide] Unlock full AWS band (eg. Wind Mobile) on CM13(Marshmallow) D852 (Koodo)

Confirmed Wind works on CM13(Marshmallow) Koodo D852.
Original thread (as far I can tell):
http://forum.xda-developers.com/cro...ad-progress-please-leave-im-updating-t2871269
Thanx & credits to
@olokos, @BlackSoulxxx and others for their hard work.
HOWEVER: I used 115868544 for 1877:RF_BC_CONFIG_I value - GSM(07,08,09,19,21) and WCDMA(22,23,25,26) where WCDMA(25) is for the extra US 1700 band. I also tried with adding WCDMA(50) Japan 1700 band, but the phone would take long to find Wind network, and would lock up when trying to manually set network operator on cellular network settings.
carlos1984 said:
1. Download this zip Google it as it's banned from xda for the ability of imei change
2. Extract it and install QPST from that zip
3. Open the caller app and type in *#*#8778#*#* (it should go off the screen after you type in the last symbol "*"
1. Remove all installed drivers.
2. Install LG United Mobile Driver
3. Enable debugging and install adb driver if it's not automatically installed.
4. Using adb issue the following commands on a separate line
Code:
.
• LGE Android for Diagnostics Port (COM*)
• LGE Android USB Serial Port (COM*)
Note: I only got LGE Android usb serial port
Click to expand...
Click to collapse
-never got step 3 to work, after you enter "setprop sys.usb.config diag,adb" (see below) the adb will exit and windows Device Manager will recognize new port which should be named "LGE AndroidNet USB Serial Port (COM*)" if it shows "LGE Modem USB Serial Port (COM*)" QPST will NOT work (you may need to update driver from LG United Mobile Driver folder)
5. Connect your phone to your PC
6. Open ADB console
7. Type in these commands:
Code:
adb shell
su
setprop sys.usb.config diag,adb
I do not know if you have to do the previous but I had to open hiddenmenu to get diag to work.
• AT&T: 3845#*850#
• Sprint: 5689#*990#
• T-Mobile: 3845#*851#
• Verizon Wireless: ##228378 (+ send)
• International Models: 3845#*855#
On my d852 I used 3845#*852#
Select port setting>diag settings>usb set for diag
Click to expand...
Click to collapse
-on my D852 the hidden menu did not work
14. Press start button and navigate to QPST -> QPST Configuration
15. Go back to device manager -> ports -> LGE Mobile USB Serial Port(Com*)
16. Find "COM*" in my case it was "COM4". It might be different for you.
17. In QPST Configuration click on "Add new port" and in "Port" type in your "COM*". In my case It's "COM4" in there. In Port label it could be anything u want. In my case I used a G3 so I typed IN "G3".
18. It should look like this now.
19. Navigate to QPST/bin and open RV_NV_Manager.exe
20. press on settings -> Comport and choose your COM port.
21. Press on file -> read from phone
22. Wait patiently until it is finished. Now pay attention!
23. Go to line 1877, click it and copy the decimal number on the right side of a programme. right click - copy
24. Go to the place where you extracted the zip from the first step and start mzTool
25. On the left side you will see "Input radix" - press decimal there.
26. On the right side you will see "RF BC CONFIG" paste your previously copied number from the RV_NV_Manager.exe there.
27. You will see now what bands are you able to use on the bottom of the app in "Bit information"
28. Switch tab to "Band Preference (NV Value)"
29. In there select all GSM bands and WCDMA bands. In my case (LG G3 D852) I selected all of GSM (07,08,19,21)and WCDMA(22,23,25,26,49). I wouldn't suggest you to do anyting else in here unless you know what you’re doing.
30. After you're done choosing what bands do you want - copy decimal number from the bottom right
31. Remove all commas from that number ( "," ) so it would be just a bunch of numbers without anything else. for me it was 562950069289344
32. Open RV_NV_Manager.exe from the point you left it (step 23) and paste your new number without commas "," there.
33. Press on write NV and then press on file ->write changed NV to the phone.
34. Open up the terminal emulator on your phone and write there this:
Code:
su
setprop persist.usb.eng 0
go back into hidden menu > Select port setting>data settings>usb set for data
35. Reboot the device and hope you'll have the reception. If you do, hooray!
36. Type in *#*#SERVICE#*#* (*#*#7378423#*#*) to see
I found this guide that helped.
https://forums.oneplus.net/threads/...-qualcomm-devices-oneplus-one-edition.193610/
Click to expand...
Click to collapse
Sounds interesting, dont you think
However this work that you mentioned here is almost nearly the same based on my original works that posted on XDA and quite famous.
So you should credit your friends who worked on this
d852 default value
any one got the default :RF_BC_CONFIG value before qpst
It should work on my LG G3A F410s? I want to enable 900 mhz band wcdma. If anyone knows how to do help me
heiitorxd said:
It should work on my LG G3A F410s? I want to enable 900 mhz band wcdma. If anyone knows how to do help me
Click to expand...
Click to collapse
Hello
It is possible to unlock WCDMA/UMTS BAND 900 on my LG G3 852 ?

How to Enable Diag Mode in CM13?

Okay so here is the issue I'm facing today. I bought a Sprint Galaxy S5, and I managed to unlock it for domestic use (AT&T). I cannot get an LTE connection because my Qualcomm processor does not have the appropriate bands to use ATT LTE's network.
I read on here that you can write your NV memory to write the firmware and enable these other bands using QPST and QXDM. The issue I'm having though is getting my computer to install the diagnostic driver for COM port. It reads the Modem under modem tab in device manager. Since the computer doesn't think there is a diagnostic port, QPST configuration cannot open a diag port which is what I need. I've been able to successfully put my phone in rndis + DM + modem by using this in emulator,
su
setprop sys.usb.confing_rndis,diag,diag_mdm
Do not type the first _ as it's meant as a space bar, but USE diag_mdm
But there is no indication that any driver has installed, and does not appear in device manager (even with hidden devices shown).
I'm running 6.0.1 CM13 w/twrp recovery with SELINUX set to permissive.
On windows 8
I also noticed that the guide to add frequency bands was written in 2014, I also know that in Lollipop, you needed to enable CP Logging to get it show up.
What I'm wondering is if there is a missing step to properly installing the diag driver, or if Qualcomm/Samsung found other means to activate it.
I noticed that when using EFSPro I can set it to Diagnostic + Modem + adb but I can only read not read/write NV memory
Also I observed when I send the SPC to read the phone with EFSPro, it says
"SPC was accepted by the phone!"
Then followed by.. "SPC was not found".
Then after I close that popup it reads my NV memory, but I can't write.
Is there a method to enable CP logging on CM13 MM and install the diag com port for QPST use? I don't have a stock recovery to enable CP logging through usual means in as I'm using TWRP.
Link to GUIDE
http://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059
Thanks in advance.
Sent from my SM-G900P using XDA-Developers mobile app
xHolomovementx said:
Okay so here is the issue I'm facing today. I bought a Sprint Galaxy S5, and I managed to unlock it for domestic use (AT&T). I cannot get an LTE connection because my Qualcomm processor does not have the appropriate bands to use ATT LTE's network.
I read on here that you can write your NV memory to write the firmware and enable these other bands using QPST and QXDM. The issue I'm having though is getting my computer to install the diagnostic driver for COM port. It reads the Modem under modem tab in device manager. Since the computer doesn't think there is a diagnostic port, QPST configuration cannot open a diag port which is what I need. I've been able to successfully put my phone in rndis + DM + modem by using this in emulator,
su
setprop sys.usb.confing_rndis,diag,diag_mdm
Do not type the first _ as it's meant as a space bar, but USE diag_mdm
But there is no indication that any driver has installed, and does not appear in device manager (even with hidden devices shown).
I'm running 6.0.1 CM13 w/twrp recovery with SELINUX set to permissive.
On windows 8
I also noticed that the guide to add frequency bands was written in 2014, I also know that in Lollipop, you needed to enable CP Logging to get it show up.
What I'm wondering is if there is a missing step to properly installing the diag driver, or if Qualcomm/Samsung found other means to activate it.
I noticed that when using EFSPro I can set it to Diagnostic + Modem + adb but I can only read not read/write NV memory
Also I observed when I send the SPC to read the phone with EFSPro, it says
"SPC was accepted by the phone!"
Then followed by.. "SPC was not found".
Then after I close that popup it reads my NV memory, but I can't write.
Is there a method to enable CP logging on CM13 MM and install the diag com port for QPST use? I don't have a stock recovery to enable CP logging through usual means in as I'm using TWRP.
Link to GUIDE
http://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059
Thanks in advance.
Sent from my SM-G900P using XDA-Developers mobile app
Click to expand...
Click to collapse
Did you ever solve this? I plan on following the same guide and I too am having this same problem.

[LG G3] This is how to enable DIAG MODE [Marshmellow]

For those who have android 6.0 on G3 and wanted to enable diag for whatever reason like...idk... changing,adding, removing GSM/LTE bands.. where is how.. quick and easy.
1. Download LG United Mobile Driver or LG Mobile Driver. (I don't think it matters.
2. Install it.
3. Go to Device Manager on your Windows Machine.
3. Physically Connect your phone to the computer and set it to CHARGE ONLY (This is necessary).
4. , Then Go to your phone Dialer PAD and type in the code: *#546368#*855# (Replace 855 with the LG G3 model Number - 855 is the international model)
- It should automatically launch you to the hidden Menu.
5. Navigate to USB > PORT CHECK TEST. (Not sure if this is necessary at all...but won't hurt to enable it anyway.. you may skip this or not..it depends..idk)
- Enable it
6. Then Navigate back to USB > QMICMSet
- Click 'OK'. ( Immediately you should see TWO Notifications Display: "LGE Android Phone" Under "Other Devices" with a yellow exclamation.
7. Right Click the SECOND ONE. (Again Not the first one, but the second "LGE Android Phone" Display.
8. Click on "Update Driver Software" > "Browse My Computer for Driver Software" > "Let Me pick From a List of Device Drivers on my computer" >
9. Make sure "Show All Device" is highlighted, then click next. It takes some couple of seconds while to collect all the lists.
- Navigate to "LGE Electronics, Inc" under "Manufacturer" (There are like 4 to 5 of them)
- Then click on the third one.. On the right look for "LGE AndroidNet for Diagnostics Port". - Note: I found mine at the third "LGE Electronics, inc" list...so just keep clicking on them all until you find it.
10. Then Click on it, and it should install the software. Voila.. you should be done and connected.. I have screenshots below..
LEt me know if you encounter any problems.. Cheers!
I have ls990 model with above procedure not working. can some one suggest any other code or method to enable the diag for G3 ls990.
Open Dial Pad
Dial ##3424#
Select DIAG
Set to Enable
-- this works for ls990, you do need the msl code
Thanks a lot o junior. its about week i am banging my head to enable the diagnostic port on my LG device and finally done it by following your method.
Regards,
this is the problem i have with my lg x power ls755 dont have usb option in hidden menu and cant find lg e diag serial port any where have any ideas on how to enable this on my computer
i need a port that will connect and my device will answer when in diag mode in order to use nv items reader writer

Categories

Resources