Join Date:Joined: Jan 2008
TBH Band Config Unlock zip Install for Razr
It's not "Magic code".
It is just a zip installation of the NVM edit using the updater-binary from an official OTA update.zip to write the 8 byte string for the band config to NV Item 1877.
The NVM is updated every time you get an OTA in order to increment the version numbers and dates. We just used the binary for our own needs.
So far, we have not had complete success with this on the D4 or Razr on stock hardware with T Mobile or ATT in the US. There appears to be a different form of lock in effect for domestic GSM carriers, because there are many reports of it working with international carriers, at least on D4.
There is a Chinese engineering ICS build that P3droid has running on his eng Razr and everything works out of the box with that radio image. It cannot be loaded on stock hardware unfortunately.
We dumped the entire NVM from it and I have been going through it to find a potential solution. There are many differences in the NVM and it will take some time to work through them to determine their impact.
Edit: I have included the Razr version of the TBH band config zip files for those interested in testing this.
These files MUST be run from Razr bootstrap recovery and NOT Safestrap.
The unlock zip writes the GSM band config string and the relock zip writes the stock string to revert if you need to for any reason.
They do no other modifications to the device and any build.prop edits or additional apns-conf.xml or system libs must be done manually if desired.
Please post back with any information regarding success or failure using these files, thanks!
The files did not upload from my dropbox properly, sorry. I will have to reattach them from PC later.
Edit 2: I reuploaded the files. These have been tested on mine and P3droid's Razrs and should work fine.
As people quickly discovered, the D4 files work on the Razr too, so you can use either. The binaries are compatible and the string is the same. The Chinese ICS build has a slightly altered string that you can also try in RadioComm if desired.
The first 2 bytes are different: 8001E80400000200
Last edited by cellzealot; 12th May 2012 at 07:14 AM.
Reason: added links for Razr version; reuploaded good files