NV
Main thread: http://forum.xda-developers.com/z3-c...uired-t2940959 Originial thread here: http://forum.xda-developers.com/cros...ating-t2871269 This thread server as a step-by-step guide for the unlocking process, but please takecare of all your personal/important information before modding your phone. It is your own responsibility to backup all your data, including online and offline backup. I take no responsibility for any broken devices/sdcards/your house going down on fire and everything else. This mod in fact does NOT unlock any sim lock, don't ask such a question. And I do NOT think it will unlock TD-LTE#d5803, LTE-A#d5833... (TBC, no such environment) What you need:Sony Xperia Z3 Compact (can be D5803/5833/SO-02G...) Firmware rooted Win7 PC with z3c ADB driver installed (I use the one come with flashtool) QPST / QXDM / mzTool / z3c diag driver (http://goo.gl/pyN5fo, password: mikuru396#xda) terminal emulator installed on z3c (can be optional, but will be easier when switching engineer mode on usb) Give thanks to #BlackSoulxxx Optional: FlashTool Optional: Firmware stock FTF, the version must match your z3c running build (in case of recovery) you can get using XperiFirm The following Guide assume you have: gain root access, installed SuperSU on phone, installed QPST/QXDM on PC. I only tested on my D5833 and SO-02F, using Windows 7 Pro x64 SP1. My originial plan is modding my SO-04E, to enable LTE in my area. But I pass it to my girlfriend few days before I found this mod. (her F-07E always boot to safe-mode, should be hardware failure)
Part 1: Connect to the phone's diagnostics mode 1. Enable superuser access in SuperSU if you have disabled it. 2. Go to: Setting -> Developer Option, make sure you turn on "Developer Option" on the top and turn OFF "USB Debugging" 3. Open terminal emulator, type the following command one by one: 4. Turn on "USB Debugging" under "Developer Option" 5. Connect your phone to PC via USB. Windows should found a few new hardware, wait until all driver installation fail. 6. Open "Device Manager" in "Computer Management", you should see some device named same as your device model, icons with yelow exclaimation mark. 7. Right-Click the first one, select Properties. Go to Detials tab, and under "Property" label, find the item called "Hardware Ids". 8. There should be some lines under the label Value. Notice the longest one, which should end with something like MI_01/MI_02 etc. 9. Your job is to find the correct device, which should end with MI_04. If you cannot find such device, either you have done something wrong, or your PC's usb fail to operate correctly. In later case, please switch to another PC. (My first trial end with this situation) 10. Once you find the correct device, go to Driver tab and press "Update Driver". Install the usb diag driver from the package, when asked about driver signature, just force insall it. Please make sure driver build match your window build, and do NOT use x86 driver on x64 windows.
Part 2: Unlock GSM/CDMA band(s) 11. Go to Start -> All Programs -> QPST, open "QPST Configuration". In the "Ports" tab, click the "Add New Port..." button in lower right corner. 12. In the Add New Port window, untick the option called "Show Serial and USB/QC Diagnostic ports only". 13. You should find an entry with the name saying z3c USB Modem. Select it and press OK. 14. Make sure the newly added port is "Enabled", under "Phone" block is MSM8974, Link is "USB". 15. Keep the configuration application running in background. Close the application will loose your connection to the phone. 16. Navigate to the installation path of QPST, in the /bin folder, find and execute "RF_NV_Manager.exe". 17. Go to "Setting" -> Comport, select the correct port you created in step 14. 18. In the top menu, "File" -> "Read from Phone". It should start reading your phone but take times. 19. After reading operation finished, in the lower left panel find the item with number 1877 (NV_RF_BC_CONFIG_I). 20. In the right panel, take a note on the originial value in case of recovery need. 21. Open mzTool, under "Band Preference (Bit info)", select "Decimal" under "Input Radax". In the "RF BC Config", enter the number you noted at step 20. It will list out all your current band supported by your headset, in the bit information box. 22. Still in mzTool, go to next tab named "Band Preference (NV Value)", select the band(s) you need. You can select all, but I personally recommand what you really need plus "[60] Reserved for BC10-1700", at lest those originally come with your phone. 23. After selecting band(s) you need, Copy the decimal value in the "RF BC Config" box below the selection area, and remove all space in between. 24. Go back to QPST again, find item #1877 (NV_RF_BC_CONFIG_I), paste the new value you calculated in step 23 into the right panel, and press the "Write NV"Button. 25. Go to "File" -> "Write Changes NV Items To Phone". 26. Close and reopen "RF_NV_Manager.exe", repeat step 17-19. If #1877 show you the value same as the one you calculated in step 23, then you are OK to proceed. If it revert back to the originial value (you should noted down at atep 20), sorry this mod is NOT for your headset and proceed to last part for quitting diagnositc mode. 27. Close RF NV Manager, unplug your headset and reboot it. If you got reception after reboot, then you are good. Please give thanks to #BlackSoulxxx 27a. Open dialer, type *#*#7378423#*#* (*#*#SERVICE#*#*), goto "Service info" -> "Configuration", you should see your unlocked band. If not, that means your phone reset it while reboot. You can do nothing unless you know how to disable the reset. 27b. If your phone cannot get signal after the mod, flash your phone with the stock FTF, do NOT select anyone under "Wipe:", select all under "Exclude:" but keep "BASEBAND" selected. This should flash the originial baseband firmware, hence remove this mod. 27c. If you still cannot get any reception, flash the whole stock FTF. This will wipe all your data, but reset it to factory installed status. 28. You are done for this section, you may continue for LTE band(s) unlock, or jump to last part for quitting diagnositc mode.
Part 3: Unlock LTE band(s) 29. Make sure you have unlocked "[60] Reserved for BC10-1700" in previous part. 30. Go to Start -> All Programs -> QXDM Professional, open "QXDM Professional". In the top menu select "Option" -> "Communication". 31. Under "All Ports in System:" select your port (should me same port as you use in QPST) and press "OK. QXDM should load all data automatically once you press ok. 32. In top menu, select "View" -> "New" -> "Common" -> "NV Browser". In the newly opened window, select "LTE" next to the "Category Filter". 33. Select the item with ID 06828 (Description = LTE BC Config, Full Path Name = LTE_BC_CONFIG). It should display "input" and "Value" of 0 under "Fields". 34. Press the "Read" button in the lower right corner, it should show a non-zero number under "Value". Please also write it down for recovery. 35. Convert the number, noted at step 34, to binary form. It will show which LTE bands your phone currently supported ... 35a. Start reading from right to left, the 1st digit from the right (right-most) will be corresponding to LTE Band 1, the 2nd digit will be for LTE Band 2, the 3rd digit will be for LTE Band 3. So the rule will be [ N-th digit will be for LTE Band N ]. 35b. For each digit, 1 means the phone support that particular band while 0 means no support. For example in D5833, it should be 549890031829 = "1000000000001000000000000000000011010101" (LTE Band 1,3,5,7,8,28,40). 35c. So if you want to unlock some LTE band(s), filp such bit to 1. In case you have a gap like band 28-40, make sure you fill it with 0, or you will fail to unlock such channel. 36. Please work out our own value that suit your need. In my case I need LTE Band 1,3,5,7,8,9,19,21,28,38,39,40,41 so my value will be "11110000000001000000101000000000111010101" = 2061719830997 37. Go back to QXDM, double-click the 0 under "Input", replace it with the number you calculated at step 36 in decimal form. 38. Write the value to your phone by pressing the "Write" button next to "Read" button. 39. Close and reopen QXDM. Repeat step 31-35 and double check the number under "Value". 40. Close QXDM, unplug your phone and reboot it. If you got reception after reboot, then you are good. Please give thanks to #BlackSoulxxx 40a. Open dialer, type *#*#7378423#*#* (*#*#SERVICE#*#*), goto "Service info" -> "Configuration", you should see your unlocked band. If not, that means your phone reset it while reboot. You can do nothing unless you know how to disable the reset. 40b. If your phone cannot get signal after the mod, flash your phone with the stock FTF, do NOT select anyone under "Wipe:", select all under "Exclude:" but keep "BASEBAND" selected. This should flash the originial baseband firmware, hence remove this mod. 40c. If you still cannot get any reception, flash the whole stock FTF. This will wipe all your data, but reset it to factory installed status. 41. If you still cannot connect via LTE, open dialer and type *#*#4636#*#* (*#*#INFO#*#*), find "preferred network" and select "LTE". 41a. If it fail to connect, either is hardware restriction, or more software setting has to be done (some carrier has different APN for 3G/LTE) 42. You are done for this section, please continue for quitting diagnositc mode.
Part 4: Quit Diagnostics mode 43. Unplug your headset if you still connect it. 44. Turn off "USB Debugging" in "Developer Option". 45. Open terminal emulator, type the following command one by one: 46. You may either turn on "USB Dibugging", or just leave it as is. 46a. You can also turnoff superuser access in SuperSU, to enjoy Puzzle and Dragon (JP). 99. Don't forget to give thanks to #BlackSoulxxx
Thanks very much for this guide... before I attempt it, a dumb question; Is this only of benefit for people that roam internationally often? Or can it improve the phone signal overall? (im in the UK) Kind regards
Still Lte band 20 is not working in D5833, while it is listed in service menu((( I guess there are some hardware differences in radio module between D5833 and D5803
Thanks for the confirmation. I own D5833, but live in Europe, and the available LTE bands in my country are 3 and 20. I guess I won't be able to use the band 20, shame.
Can anyone, who own D5803 using this manual copy configuration of their phone in QXDM and PM me this file?
Wow, Much thanks. Very good. Great guide...
Excellent guide I will try it later, I had a D5833 and I need to get working the LTE 1700/2100 band Noob question; If you flash the FTF BASEBAND to revert de mod to it's original state, flashing the BASEBAND of a D5803 FTF to a D5833 model would not do the same trick?? (i suposse not but I'm asking anyway )