[GUIDE][PARTIAL] Unlock Additional LTE bands on Chinese & US variants of OnePlus 3

weeka89

Senior Member
Apr 15, 2012
209
54
0
Cairo
B8 + B40 CA is impossible for 1+3T, because they are different technologies.
B8 is LTE-FDD, however B40 is LTE-TDD.
You can modify NV item #28874 (RFNV_LTE_CA_BW_CLASS_COMBO_I) via QRCT to change combination of LTE CA by yourself.
I make a QCN file for B3+B5 LTE CA.
I haven't tried it yet, because my mobile carrier don't support B5.
You can use it, but it's at your own risk.



You can download it from following link:
https://forum.xda-developers.com/showpost.php?p=69567459&postcount=218



Thanks for your testing.
Most of android OS can use adb command "setprop sys.usb.config diag,adb" or "setprop sys.usb.config diag" to enable Qualcomm diag mode.
I found RR (Resurrection Remix) only accepts "setprop sys.usb.config diag", so I use "setprop sys.usb.config diag" to enable Qualcomm diag mode in my app.
However, in your case, AOSPExtended only accepts "setprop sys.usb.config diag,adb". :(
I add a new button in my app.
You can click "Enable Qualcomm diagnostics mode (Method 2)" button to trigger Qualcomm diag mode.

update:
Code:
/boot/init.qcom.usb.rc

on property:sys.usb.config=diag,adb && property:sys.usb.configfs=0
    write /sys/class/android_usb/android0/enable 0
    write /sys/class/android_usb/android0/iSerial ${ro.serialno}
    write /sys/class/android_usb/android0/idVendor 05C6
    write /sys/class/android_usb/android0/idProduct 676C #VENDOR_EDIT [email protected], 2016/09/21, modify from 901D to 676C
    write /sys/class/android_usb/android0/f_diag/clients diag
    write /sys/class/android_usb/android0/functions diag,adb
    write /sys/class/android_usb/android0/enable 1
    start adbd
    setprop sys.usb.state ${sys.usb.config}

on property:sys.usb.config=diag && property:sys.usb.configfs=0
    write /sys/class/android_usb/android0/enable 0
    write /sys/class/android_usb/android0/iSerial ${ro.serialno}
    write /sys/class/android_usb/android0/idVendor 05C6
    write /sys/class/android_usb/android0/idProduct 900E
    write /sys/class/android_usb/android0/f_diag/clients diag
    write /sys/class/android_usb/android0/functions diag
    write /sys/class/android_usb/android0/enable 1
    setprop sys.usb.state ${sys.usb.config}
Hey man,

Using ur app on sian's aospextended the rmt_storage patch state is stock even after granting root access and rebooting my 1+3.

And after rebooting I lose the data connection over hspa.

Is there something I'm doing wrong?

Sent from my Pixel using Tapatalk
 

raykewl

Member
Nov 5, 2015
38
19
0
Edit: Additional info. I followed Update 7 instructions from OP.

Finally went ahead to try this on my US OP3 (want to unlock band 3). Tried it on latest OOS, didn't work. Then I downgraded to MM using a custom ROM (CM13) and re-did all the steps, to no avail. Should I do something else other than downgrading in order for this to work?

Band 3 appears on Network Signal Guru but it doesn't do anything. Either no signal or only H+ appears.

Please help
 
Last edited:

moti2408

Member
Jun 21, 2016
33
5
0
My OS version is Open Beta 15.

Firstly, i tried all the schenerios in first and second post. No success.

Then, i was digging around the topic and found this QCN.
:)
I hadn't got any hopes, since i was trying for 4-5 hours.

https://yadi.sk/d/2SF3PUa133jD8a

Flashed this, wrote the NV 1878 231 value and rebooted(without any hope)

Then my phone booted up. Unbelieveablelly success, my phone can work with B3 now.

But now, i have another problem. Another bands are broken. Dont care too much,because my carrier used to set up almost everywhere B3 but the other bands were working before the unlock procedure.

Sorry for corrupt English.
Finally it works well for me, I do not know what the difference but I am currently with 4.1.3 and b3 on Op3 US
:):):):)
Thank you all and of course @otonieru

I will keep you updated to see if its holds good
 

BMAK92

New member
May 24, 2017
1
1
0
hey so i cant understand any technical jargon, any chance you would be willing to walk me through this step by step like a 5 year old? i've been staring at this page for a week not and am not any closer to solving this puzzle
 
  • Like
Reactions: THE DARKEST NIIGHT

promise0078

Member
Jun 7, 2014
21
1
23
i followed all the steps on post #1 and #2 . still not working on my US model .. someone can help me? i tried so many times .. still no signal or always goes to H+ . can't unlock B3 ..
 

otonieru

Senior Member
May 7, 2011
3,417
2,206
243
Djakarta
Hey I am not able to find the tutorial.There`s some problem
Can u get me the proper link and Tutorial for NV manager as I will be trying to Enable B3-B5 Carrier Aggregation
By saying that the HELP file of QDART is the tutorial,

He means that you need to read the help section of the QDART by yourself to understand the each function of the tool,

QDART stand for Qualcomm Development Acceleration Resources Kit,

NV Manager, QRCT, QPST, QXDM are all Qualcomm Tools, which most of them are licensed,

thus we can tell you which one to used (just like i write how to use the QPST and QXDM on my main post) BUT we cant share the software, since it would become piracy

You need to get a hand of QDART by yourself, install it on your PC, and read the help file to learn how to use it.

Snowwolf already kind enough to share his .qcn to easily emable certain band CA config, and he even share which value need to be mod if you wosh to try to enable other bands CA,

but again, you need to learn how to do it and how to use the tools you have by yourself,

Because its your phone that you are playing with,

In case of something happen, you need to know exactly what you did previously and how to fix it back.

Also,

because my country and snowwolf country dont have your country LTE bands, thus the one who can try it for us, is, yourself :)
 
Jun 19, 2014
39
4
0
Jaipur
By saying that the HELP file of QDART is the tutorial,

He means that you need to read the help section of the QDART by yourself to understand the each function of the tool,

QDART stand for Qualcomm Development Acceleration Resources Kit,

NV Manager, QRCT, QPST, QXDM are all Qualcomm Tools, which most of them are licensed,

thus we can tell you which one to used (just like i write how to use the QPST and QXDM on my main post) BUT we cant share the software, since it would become piracy

You need to get a hand of QDART by yourself, install it on your PC, and read the help file to learn how to use it.

Snowwolf already kind enough to share his .qcn to easily emable certain band CA config, and he even share which value need to be mod if you wosh to try to enable other bands CA,

but again, you need to learn how to do it and how to use the tools you have by yourself,

Because its your phone that you are playing with,

In case of something happen, you need to know exactly what you did previously and how to fix it back.

Also,

because my country and snowwolf country dont have your country LTE bands, thus the one who can try it for us, is, yourself :)
will writing NV values delete all the modem Data from my phone?
I have got the software
Pls i require a little help
@snowwolf

Hey no success bro
I need little help so that I Can write the values In NV
It's not writing
 
Last edited:

otonieru

Senior Member
May 7, 2011
3,417
2,206
243
Djakarta
I have unlocked band 3 on a3000US, and it shows in network signal guru, yet I don't have a 4g connection (and my battery drains faster...).
Suggestions?
In ideal situation, even flashing CNNOIMEI alone would do the job, in another not so ideal, you gonna need to write NV 1878 to 231 or 225

Unfortunately, there's too many mixed variable in each person situation, named : firmware version, modem version, rom version, kernel version, official non official rom, flashing sequence, etc,

if your battery drain faster, there's chance you kinda had a "crash" in modem, happen to me once during an unlocking process post updating ROM.

What fix it is reflashing everything from 0.

You might want to try with a pure stock configuration to actually test whether you managed to unlock it or not, and write down or remember the successful steps,

Once you managed to get the working band, then only you start to try it on custom rom or more complex mix n match of firmware etcetera,

Because, from what i learned in this thread so far,

Almost all of us failed in the beginning but ends up successful after many trials,

What i wrote in main post is what worked for me, and some other guys,

It might not work right away for you, since we might have a totally different set up of software on out phone.
 
  • Like
Reactions: qhsusb_bulk

Benrap

Senior Member
Mar 16, 2015
184
42
0
In ideal situation, even flashing CNNOIMEI alone would do the job, in another not so ideal, you gonna need to write NV 1878 to 231 or 225

Unfortunately, there's too many mixed variable in each person situation, named : firmware version, modem version, rom version, kernel version, official non official rom, flashing sequence, etc,

if your battery drain faster, there's chance you kinda had a "crash" in modem, happen to me once during an unlocking process post updating ROM.

What fix it is reflashing everything from 0.

You might want to try with a pure stock configuration to actually test whether you managed to unlock it or not, and write down or remember the successful steps,

Once you managed to get the working band, then only you start to try it on custom rom or more complex mix n match of firmware etcetera,

Because, from what i learned in this thread so far,

Almost all of us failed in the beginning but ends up successful after many trials,

What i wrote in main post is what worked for me, and some other guys,

It might not work right away for you, since we might have a totally different set up of software on out phone.
I did this on complete stock and even changed nv1878. I've just wiped my phone yesterday and reflashed stock, so I'll try agin in the next few days. Very odd though. There have been success stories in this thread of people from my country (Israel).
 
Jun 19, 2014
39
4
0
Jaipur
If its not writing mean you forgot to patch your rmt storage,

Read the steps again
Do we have to Flash rmt Storage patch
I Modified the values in the NV
Qcn..Bia the manager
The NV inside The phone...Modified it and saved it
I have to try wether it is working
One doubt
Can we fix modem and all Except IMEI BY USING unbrick method
I.e.
Can we use unbrick tool to get modem values and settings back...
 

otonieru

Senior Member
May 7, 2011
3,417
2,206
243
Djakarta
Do we have to Flash rmt Storage patch
I Modified the values in the NV
Qcn..Bia the manager
The NV inside The phone...Modified it and saved it
I have to try wether it is working
One doubt
Can we fix modem and all Except IMEI BY USING unbrick method
I.e.
Can we use unbrick tool to get modem values and settings back...
You wont be able to write or flash any mod if your storage is not patched,

Unbrick guide will bring everything back to stock, including every value inside the modem
 
  • Like
Reactions: THE DARKEST NIIGHT