*UPDATED* 6/26/2012 Motorola Razr/Maxx, Droid 4,HTC Rezound Will work on any GSM

Search This thread

radiohead7778580

Senior Member
Apr 9, 2010
265
162
Chicago
how should a string of numbers look like after you wrtie it with radiocomm?

---------- Post added at 09:12 AM ---------- Previous post was at 09:08 AM ----------

8703e80400000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
 

lrrc29

Senior Member
Aug 10, 2010
56
9
Milwaukee
how should a string of numbers look like after you wrtie it with radiocomm?

---------- Post added at 09:12 AM ---------- Previous post was at 09:08 AM ----------

8703e80400000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

yes but i dont know i this hack is case sensitive but my letter e was uppercase

Sent from my DROID RAZR using xda premium
 

radiohead7778580

Senior Member
Apr 9, 2010
265
162
Chicago
so is mine it just coped it in lower case

but when your write it does it give you number in the front like

Sending 'NVWrite' command with data '55078703E804000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000' to the radio...
Sent to radio: 2755078703E80400000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037887E
Returned from radio: 2755078703E80400000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037887E
NVWrite ==>SUCCESSFUL
Time to execute command: 0.194 seconds.
Command timeout set to : 15 seconds.
 

lrrc29

Senior Member
Aug 10, 2010
56
9
Milwaukee
so is mine it just coped it in lower case

but when your write it does it give you number in the front like

Sending 'NVWrite' command with data '55078703E804000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000' to the radio...
Sent to radio: 2755078703E80400000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037887E
Returned from radio: 2755078703E80400000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037887E
NVWrite ==>SUCCESSFUL
Time to execute command: 0.194 seconds.
Command timeout set to : 15 seconds.

looks like it worked. im 100% sure your sim card isnt making good contact.

Sent from my DROID RAZR using xda premium
 

fade79

Senior Member
Aug 10, 2009
57
6
Los Angeles, CA
if you notice the of contacs area on vzw sim are larger than tmobile sim you need to cut almost all the upper side of the sim and yes sometimes takes a while but once you are going to have apn settings menu. are you sure you did all the steps right? specially the step you have to change the first 16 digits because for me that was the trickiest part

one more thing i did is i downloaded phone info app from the play store and i put my phone in gsm only
Sent from my DROID RAZR using xda premium

I also don't have the APN settings menu in my phone. In fact all the wireless settings look the same... no way to switch to GSM. Did you settings menu change once it detected the new SIM?
 

lrrc29

Senior Member
Aug 10, 2010
56
9
Milwaukee
yes the menu appeared with tmobile sim a faster than with the at&t one but your sim needs to be recognized first. Did you get the phone info app from the play store?

Sent from my DROID RAZR using xda premium
 

fade79

Senior Member
Aug 10, 2009
57
6
Los Angeles, CA
yes the menu appeared with tmobile sim a faster than with the at&t one but your sim needs to be recognized first. Did you get the phone info app from the play store?

Sent from my DROID RAZR using xda premium

I just got it. Looks like a pretty useful app actually. I used it to set my Network type as GSM (auto PRL). Is that what you used? After i did that the No SIM found message disappeared and instead I just have a no service message.
 

lrrc29

Senior Member
Aug 10, 2010
56
9
Milwaukee
i did use gsm only. you just need to get that sim card recognized playing and cutting it and restarting the phone. every time you move that sim card you need to reboot

Sent from my DROID RAZR using xda premium
 

lrrc29

Senior Member
Aug 10, 2010
56
9
Milwaukee
no service message means it worked. is your sim card desactivated?

Sent from my DROID RAZR using xda premium
 

lrrc29

Senior Member
Aug 10, 2010
56
9
Milwaukee
try rebooting again. did you get the apn settings on the mobile networks menu?
if nothing works double check your radiocomm steps and make sure your sim card is making contact once you get the "unknown sim" pop up in your phone you should get apn settings in the menu
Sent from my DROID RAZR using xda premium
 
Last edited:

lrrc29

Senior Member
Aug 10, 2010
56
9
Milwaukee
i got this from the bionic forum they are also working on scripts for the razr and droid 4 to avoid the radiocomm steps

"The Tmo SIM as well as my AT&T SIM worked perfectly in my Droid 2 Global last night. Something seems off on my Bionic.

Thankfully CDMA/LTE still works, but it's refusing to authenticate to Tmo/ATT. As the instructions say, I'm allowing the Bionic some time. 15 minutes minimum.

I think I'll undo the hack, reboot, redo the hack, reboot and try again. It's just so weird to me because my Bionic happily took the AT&T SIM once, as I have the photo evidence posted earlier in the thread.

Edit 1: Okay, I was hoping this would work.

I left the TMo SIM in the phone. I undid the hack, rebooted with radiocomm, then I redid the hack and rebooted with radiocomm. I'm still not getting any luck.

I'm thinking I might have to try redoing the hack without a SIM card in the phone. I'm not sure how else to get it to take. It feels so close, as I can set the phone to WCDMA only and it'll start measuring signal but won't authenticate to the TMo Network.

Edit 2: A-ha! My little theory worked! I don't know why this worked better, but it did.

I shut the phone down, and made sure it had no SIM card when I booted it up. I went into Safestrap, wiped Cache/Dalvik, and then let it finish booting.

I went into RadioComm, undid the hack, then used RadioComm to reboot.

Once it finished rebooting, I reapplied the hack, then used RadioComm to reboot.

I shut the phone down, and then put in my AT&T SIM and booted up. I went to the Dialer, did *#*#4636#*#* and switched it over to WCDMA Preferred. Then BAM! It immediately hopped onto AT&T's network again!

I powered off, then swapped in my T-Mobile SIM. Not getting any love at all. Whether I try WCDMA Only, GSM Only, WCDMA Preferred, or GSM Auto (PRL) the TMo network refuses to let my Bionic hop on. It had been at least 10 minutes and there wasn't any love there.

So I shut it down, swapped back to the AT&T SIM and set it to WCDMA Preferred. It didn't immediately authenticate like it did before. This hack has some very interesting behavior."

Sent from my DROID RAZR using xda premium
 

Top Liked Posts

  • There are no posts matching your filters.
  • 17
    TBH Band Config Unlock zip Install for Razr

    It's not "Magic code".

    It is just a zip installation of the NVM edit using the updater-binary from an official OTA update.zip to write the 8 byte string for the band config to NV Item 1877.

    The NVM is updated every time you get an OTA in order to increment the version numbers and dates. We just used the binary for our own needs.

    So far, we have not had complete success with this on the D4 or Razr on stock hardware with T Mobile or ATT in the US. There appears to be a different form of lock in effect for domestic GSM carriers, because there are many reports of it working with international carriers, at least on D4.

    There is a Chinese engineering ICS build that P3droid has running on his eng Razr and everything works out of the box with that radio image. It cannot be loaded on stock hardware unfortunately.
    We dumped the entire NVM from it and I have been going through it to find a potential solution. There are many differences in the NVM and it will take some time to work through them to determine their impact.

    Edit: I have included the Razr version of the TBH band config zip files for those interested in testing this.

    These files MUST be run from Razr bootstrap recovery and NOT Safestrap.
    The unlock zip writes the GSM band config string and the relock zip writes the stock string to revert if you need to for any reason.

    They do no other modifications to the device and any build.prop edits or additional apns-conf.xml or system libs must be done manually if desired.

    Please post back with any information regarding success or failure using these files, thanks!
    The files did not upload from my dropbox properly, sorry. I will have to reattach them from PC later.

    Edit 2: I reuploaded the files. These have been tested on mine and P3droid's Razrs and should work fine.
    As people quickly discovered, the D4 files work on the Razr too, so you can use either. The binaries are compatible and the string is the same. The Chinese ICS build has a slightly altered string that you can also try in RadioComm if desired.
    The first 2 bytes are different: 8001E80400000200
    6
    ***UPDATE 6/26/2012***

    Ok, not all the info that I got before was 100% correct. It looks like RAZR / MAXX is unlocked only for Global(GSM) use which is outside of USA. The Tmobile and ATT sims are not fully working as of right now.

    We have couple amazing Devs which are working to resolve this issue.

    Please PM me if you want me to update the OP.

    -----------------------------------------------------------------------------

    On the Bionic forum people found a way to activate disabled feature of couple 4g verizon phones to be able to use it on GSM networks.

    Can someone test it please?

    http://xdaforums.com/showthread.php?t=1297714

    ***UPDATE***

    Follow this steps to make it work: http://xdaforums.com/showpost.php?p=25967009&postcount=118
    4
    how did you do it , as in the steps and the carrier you used, att or tmo.
    assuming it's att as you are on 850 3g, also can you please post a pic for us.
    we will be so happy :)

    Actually its pretty easy , no need of Radio Comm

    I have a Moto CDMA XT912

    Steps :

    [optional] Flash this : ICS ROM > http://bit.ly/JW8j8w
    [optional] Flash this : GAPPS > http://bit.ly/JW7vAG

    Flash this : GSM PATCH > http://bit.ly/JW7Hjd
    FLash this : "MAGIC code" lol > http://xdaforums.com/attachment.php?attachmentid=1048524&d=1336485537

    Reboot , and done ! , you'll have GSM enabled [ all bands ]
    4
    I am not giving up anyone. Right now still working on unlock for xt912 for my wife since she hates changing phones. Can't ask for anything better then a phone that can do both CDMA and gsm. We are planning a trip to Asia after the baby is born.

    Sent from my DROID RAZR HD using xda app-developers app
    4
    The first thing I did after completing the edit on my RAZR M and testing it was to check the NVM of my D4 for the same item. It is not present on any of the MDM6600 chipset devices, unfortunately.

    There are a number of other items that contain single byte boolean switches(01 on 00 off) in the 8000-8400 range, which is the main section of Motorola proprietary NVM area and I have tried all of them and none of them enables US GSM carriers.

    I have also tried logging with QXDM in order to try to replicate the method used to isolate the 8322 item in the MSM8960 chipset based devices but without any results so far.

    This was deliberately setup on those devices as a boolean switch by the Moto engineers and there is not necessarily a corollary item or switch on the MDM6600 based devices.
    I have dumped the NVM from all of my devices including Bionic, D4, RAZR and Xoom many times and logged QXDM for hours monitoring the radio searching for clues to the nature and location of the MCC block and have tried many varied combinations of NV edits.

    I have spent hundreds of hours doing this over the past year since their release over many firmware revisions and configurations and have NVM dumps from other users devices and engineering models with the unlocked Chinese radio and everything working as it should and still have not found the solution.

    I am not saying I haven't missed anything nor thought through all of the possibilities, but I have amassed a considerable amount of information and studied it at length.
    We have tools and techniques for access and analysis of the radios and the images and haven't found the answer yet.

    I just wanted to make clear that much of this ground has been covered and there is a lot of work that has been done thus far.