*UPDATED* 6/26/2012 Motorola Razr/Maxx, Droid 4,HTC Rezound Will work on any GSM

Search This thread

cellzealot

Senior Member
Jan 4, 2008
1,362
917
Philadelphia, PA
Running AT+CLAC from any of the diagnostic serviceware apps immediately reboots the device or resets the modem.
It sends the request translated into a 4 byte hex string "A0225F7E" and the response is either a reboot or modem going offline then returning after reset.

I havent tried from hyperterminal.

Edit: This is on my D4 with VZW SIM inserted and active while booted with BP Tools to expose the modem interface.
 
Last edited:

cellzealot

Senior Member
Jan 4, 2008
1,362
917
Philadelphia, PA
Just a bit of what I have been getting from hyperterminal.
Very little...

AT+GMM
196

OK
AT+CGPADDR
+CGPADDR: 1,"0.0.0.0"

OK
AT+CLAC
ERROR
AT+CNUM
ERROR
AT+CGQMIN
OK
AT+FCLASS
OK
AT&D
OK
AT+CBC
0,0
 

srtandroid

Member
Jul 29, 2012
8
1
dont know if this means anything

i dont know if this is significant or not but today i went to ATT and picked up a micro sim card for free and activated it with a $50.00 go phone prepaid deal. so i put the sim card in and added a new apn according to what ATT told me needed to be in each field. i rebooted the phone and selected global mode for the network settings. then i turned the radio off and back on after selecting lte/cdma/evdo/gsm/wcdma as my preferred network type using the phone info shortcut. the signal bars with the x through it went away and showed full bars and the gsm service status changed from disconnected to in service. it stayed like this for a full minute. during that time i attempted to make a call. it rang one time then disconnected. afterwards i tried to call again and it said outgoing calls restricted by fdn. then i noticed that the signal bars had changed from full bars to a solid signal bar area with no signal but just a solid grey area. i turned the phone off and back on with no change. then i attempted to make a call again and each time i press send the signal comes back for about 2 seconds before it goes back to solid grey and says outgoing calls restricted by fdn. im not sure if anyone else has experienced actually getting signal briefly or not. this was not a close to the U.S. border occurrence either as i am in North Carolina. my device is a rooted xt912 with verizon updated ICS. i hope this can be of some use.
 

Lekan Adeyeri

Senior Member
Jul 31, 2012
122
41
Boston, Massachusetts
i dont know if this is significant or not but today i went to ATT and picked up a micro sim card for free and activated it with a $50.00 go phone prepaid deal. so i put the sim card in and added a new apn according to what ATT told me needed to be in each field. i rebooted the phone and selected global mode for the network settings. then i turned the radio off and back on after selecting lte/cdma/evdo/gsm/wcdma as my preferred network type using the phone info shortcut. the signal bars with the x through it went away and showed full bars and the gsm service status changed from disconnected to in service. it stayed like this for a full minute. during that time i attempted to make a call. it rang one time then disconnected. afterwards i tried to call again and it said outgoing calls restricted by fdn. then i noticed that the signal bars had changed from full bars to a solid signal bar area with no signal but just a solid grey area. i turned the phone off and back on with no change. then i attempted to make a call again and each time i press send the signal comes back for about 2 seconds before it goes back to solid grey and says outgoing calls restricted by fdn. im not sure if anyone else has experienced actually getting signal briefly or not. this was not a close to the U.S. border occurrence either as i am in North Carolina. my device is a rooted xt912 with verizon updated ICS. i hope this can be of some use.


happened to me to
 

igwtapc

Senior Member
Apr 21, 2009
70
29
Oklahoma City
Okay got command list pulled and it is depended on the sim inserted. Does anyone have an xt912 with a non us sim. Wonder if the at commands are a different set again. So far the list has not shown much to me but got some moto manuals about at commands. The sim cards that I got are not active and will be interesting if the sim being active bring a different set of commands. Working on a guide on at commands for the RAZR if this does pan out.

Sent from my DROID RAZR HD using xda app-developers app
 
  • Like
Reactions: chunjaenim

Cks69

Senior Member
Sep 21, 2011
73
4
I have an xt912, and, using it with a non us sim.

I am using it with a mexican carrier, and can pick up both us and mx carriers from my location.

Just give me a walk trough on what I need to do.

Also, this is my daily driver, so as much as I would like to help, I don't want to get stuck with a non working phone.

Thanks for keeping his rolling.




Okay got command list pulled and it is depended on the sim inserted. Does anyone have an xt912 with a non us sim. Wonder if the at commands are a different set again. So far the list has not shown much to me but got some moto manuals about at commands. The sim cards that I got are not active and will be interesting if the sim being active bring a different set of commands. Working on a guide on at commands for the RAZR if this does pan out.

Sent from my DROID RAZR HD using xda app-developers app
 
  • Like
Reactions: chunjaenim

igwtapc

Senior Member
Apr 21, 2009
70
29
Oklahoma City
You need to use hyperterminal and the phone in bp tools mode.

1)Download hyperterminal
2)Reboot to bp tools by shutting down then hold vol up and vol down then press power
3)Connect the phone with USB cable
4)Under device manager find Motorola USB modem
5)Find the com port it is using
6)Start hyperterminal then choose that com port in the drop down box
7)Do not change any settings, just click OK on the next window
8)Click file at the top then choose properties
9)Click the ASCII button, select the two first selection boxes
10)click OK and then OK and you should be back at the main window.
11)Type "at" then hit enter (only type what is in the quotes) next should say ok
12)If you get OK then type "at+clac" and hit enter
13)After the list populates use your mouse to highlight the list
14)Hold the Ctrl key and press c then the highlight may disappear
15)Open notepad then hold Ctrl key and press v
16)Save the file then you can close hyperterminal and then disconnect your phone
17)Reboot your phone and done

Email the notepad file to: [email protected]

Sent from my DROID RAZR HD using xda app-developers app
 

Cks69

Senior Member
Sep 21, 2011
73
4
You got mail!!!

You need to use hyperterminal and the phone in bp tools mode.

1)Download hyperterminal
2)Reboot to bp tools by shutting down then hold vol up and vol down then press power
3)Connect the phone with USB cable
4)Under device manager find Motorola USB modem
5)Find the com port it is using
6)Start hyperterminal then choose that com port in the drop down box
7)Do not change any settings, just click OK on the next window
8)Click file at the top then choose properties
9)Click the ASCII button, select the two first selection boxes
10)click OK and then OK and you should be back at the main window.
11)Type "at" then hit enter (only type what is in the quotes) next should say ok
12)If you get OK then type "at+clac" and hit enter
13)After the list populates use your mouse to highlight the list
14)Hold the Ctrl key and press c then the highlight may disappear
15)Open notepad then hold Ctrl key and press v
16)Save the file then you can close hyperterminal and then disconnect your phone
17)Reboot your phone and done

Email the notepad file to: [email protected]

Sent from my DROID RAZR HD using xda app-developers app
 
  • Like
Reactions: igwtapc

bedwa

Inactive Recognized Developer
Oct 5, 2008
1,180
722
Springfield IL
Looks like we're going somewhere. If for some reason we run flat into a brick wall with this, would there be a possibility of using kexec and aosp to our advantage and possibly run a baseband from an IMG file instead of the actual partition? Similar to how Samsung Captivates on AOSP run it. Since the baseband runs the hardware and is accessed by the software, it may be (however difficult and slim), an option.
 

igwtapc

Senior Member
Apr 21, 2009
70
29
Oklahoma City
According to the at commands in the nv of the phone the US sims are not in the approved list. The switch in at+CSO shows as off with a US sim but on with a Verizon sim. The overseas sims have to protocol to activate the vzw at commands since vodaphone and other carriers use them for SMS roaming. If we get at+CSO to change from 0 (off) to 1 (on) then the phone will provision to use the sim info and not the prl list of approved carriers. At+CSO controls the service options for the phone. I have not found the nv item attached to this setting but we need to change from off to on. On the msm8960 it is on to an off setting. The only other setting that may changes this is in at&d which deals with the circuit interrupt with the radio. Will get some more research involved and report back.

Sent from my DROID RAZR HD using xda app-developers app
 

Cks69

Senior Member
Sep 21, 2011
73
4
Awesome.....if you need me to do any more tests or get you more information please let me know.

I will be happy to assist.

Keep it up and thanks.
 

srtandroid

Member
Jul 29, 2012
8
1
i like

i think i like where this is going. so forgive me if this is a stupid question. but what keeps us from just changing said values and being done with it?
 

igwtapc

Senior Member
Apr 21, 2009
70
29
Oklahoma City
Anyone has the Gobi software for the phone. Tried to get it from Motorola and Qualcomm but no luck. I have been looking at trying to find what will allow me to edit the at commands or a definition of the nv items. For the next few days will be out of pocket to work on this but will return as soon as I can.

Sent from my DROID RAZR HD using xda app-developers app
 

Cks69

Senior Member
Sep 21, 2011
73
4
I'm no guru here, but doesn't modifying those values mess with the checksum.... (or something like that...)...?

Or, I dont have a clue with what im talking about, and barking up the wrong tree.....??...hehehe

Sent from my DROID RAZR using xda premium
 

skryte

Senior Member
Jan 10, 2010
327
58
Lincoln City
in the description at gsmarena it says that the xt912 has the TI OMAP 4430 chipset. is this just for the domestic version native to north america?
 
is there any way to apply this to JB phone?

ive got an XT912, already on JB, rooted, and everything i install bootstrap 2.0 and attempt to install this, it says it installs complete, but upon reboot i get 'encryption unsuccessful', i clear data and get the phone rebooted (into JB), but my att or tmo sim are not accepted.

i attempt to flash via safe strap, and fails to flash, same with boot manager, i get error status:6


ay direction would be greatly helpful!
 

queberican351

Senior Member
Dec 12, 2011
228
115
USA
is there any way to apply this to JB phone?

ive got an XT912, already on JB, rooted, and everything i install bootstrap 2.0 and attempt to install this, it says it installs complete, but upon reboot i get 'encryption unsuccessful', i clear data and get the phone rebooted (into JB), but my att or tmo sim are not accepted.

i attempt to flash via safe strap, and fails to flash, same with boot manager, i get error status:6


ay direction would be greatly helpful!

I'm not sure exactly what you're trying to flash. There's currently no unlock for US GSM for the XT912 (AT&T, Tmobile, ect). The seem edit in the earlier posts about NV 1877 (if that's what you're referring to) only applied to the Bionic. There are a few people still drilling away at the XT912, and Droid 4 to try and find the location of the lockout. So far it's been unsuccessful, but anything is possible. If it can be found, it'll happen. It's just not obvious. Motorola did a great job at hiding it on this one.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 17
    TBH Band Config Unlock zip Install for Razr

    It's not "Magic code".

    It is just a zip installation of the NVM edit using the updater-binary from an official OTA update.zip to write the 8 byte string for the band config to NV Item 1877.

    The NVM is updated every time you get an OTA in order to increment the version numbers and dates. We just used the binary for our own needs.

    So far, we have not had complete success with this on the D4 or Razr on stock hardware with T Mobile or ATT in the US. There appears to be a different form of lock in effect for domestic GSM carriers, because there are many reports of it working with international carriers, at least on D4.

    There is a Chinese engineering ICS build that P3droid has running on his eng Razr and everything works out of the box with that radio image. It cannot be loaded on stock hardware unfortunately.
    We dumped the entire NVM from it and I have been going through it to find a potential solution. There are many differences in the NVM and it will take some time to work through them to determine their impact.

    Edit: I have included the Razr version of the TBH band config zip files for those interested in testing this.

    These files MUST be run from Razr bootstrap recovery and NOT Safestrap.
    The unlock zip writes the GSM band config string and the relock zip writes the stock string to revert if you need to for any reason.

    They do no other modifications to the device and any build.prop edits or additional apns-conf.xml or system libs must be done manually if desired.

    Please post back with any information regarding success or failure using these files, thanks!
    The files did not upload from my dropbox properly, sorry. I will have to reattach them from PC later.

    Edit 2: I reuploaded the files. These have been tested on mine and P3droid's Razrs and should work fine.
    As people quickly discovered, the D4 files work on the Razr too, so you can use either. The binaries are compatible and the string is the same. The Chinese ICS build has a slightly altered string that you can also try in RadioComm if desired.
    The first 2 bytes are different: 8001E80400000200
    6
    ***UPDATE 6/26/2012***

    Ok, not all the info that I got before was 100% correct. It looks like RAZR / MAXX is unlocked only for Global(GSM) use which is outside of USA. The Tmobile and ATT sims are not fully working as of right now.

    We have couple amazing Devs which are working to resolve this issue.

    Please PM me if you want me to update the OP.

    -----------------------------------------------------------------------------

    On the Bionic forum people found a way to activate disabled feature of couple 4g verizon phones to be able to use it on GSM networks.

    Can someone test it please?

    http://forum.xda-developers.com/showthread.php?t=1297714

    ***UPDATE***

    Follow this steps to make it work: http://forum.xda-developers.com/showpost.php?p=25967009&postcount=118
    4
    how did you do it , as in the steps and the carrier you used, att or tmo.
    assuming it's att as you are on 850 3g, also can you please post a pic for us.
    we will be so happy :)

    Actually its pretty easy , no need of Radio Comm

    I have a Moto CDMA XT912

    Steps :

    [optional] Flash this : ICS ROM > http://bit.ly/JW8j8w
    [optional] Flash this : GAPPS > http://bit.ly/JW7vAG

    Flash this : GSM PATCH > http://bit.ly/JW7Hjd
    FLash this : "MAGIC code" lol > http://forum.xda-developers.com/attachment.php?attachmentid=1048524&d=1336485537

    Reboot , and done ! , you'll have GSM enabled [ all bands ]
    4
    I am not giving up anyone. Right now still working on unlock for xt912 for my wife since she hates changing phones. Can't ask for anything better then a phone that can do both CDMA and gsm. We are planning a trip to Asia after the baby is born.

    Sent from my DROID RAZR HD using xda app-developers app
    4
    From what I've gone through so far I can't seem to find anything in particular in any of the nv items that jumps out. I've tried comparative with a SIM card, without, all kinds of ways. Something that was brought to my attention is that even though this phone has the same radio chip, it has a seperate Lte on chip that the other razr's don't. I've found where in the bp.img the us frequencies are blocked. But it's not as simple as overwriting or rewriting the values as that still breaks the signature on the expected filesize check. I also found a value table when going through the mmcblk1 pull and I'm going to see if I can use that to manipulate the bp.img file. Who knows. Just finished my school reports so I got some free time tonight and tomorrow night. Anyone who's up late can through me a google+ chat "queberican351"


    ~SU!C!D3~ on Tapatalk

    ---------- Post added at 04:56 AM ---------- Previous post was at 04:53 AM ----------

    Oh, and the bp.img does reference 0F as a trigger for the 255 (Network ID) and 65535 (System ID) block. Maybe that's somewhere to start. But there are ALOT of locations in the NV dumps containing 0F


    ~SU!C!D3~ on Tapatalk

    ---------- Post added at 05:06 AM ---------- Previous post was at 04:56 AM ----------

    This is the values table I found. I don't know that it'll help us but anyone who knows a lil sum'n sum'n to do with this here you go.

    0 = NULL
    1 = 38.4
    2 = 76.8
    3 = 153.6
    4 = 307.2 short
    5 = 307.2 long
    6 = 614.4 short
    7 = 614.4 long
    8 = 921.6
    9 = 1228.8 short
    A = 1228.8 long
    B = 1843.2
    C = 2457.6
    D = 1536.0
    E = 3072.0
    F = VarRateNonOverride
    10 = 460.8
    11 = 614.4 (4slot)
    12 = 768.0
    13 = 921.6 (4slot)
    14 = 1075.2
    15 = 1228.8 (4slot)
    16 = 1843.2 (2slot)
    17 = 2150.4
    18 = 2457.6 (2slot)
    19 = 3686.4
    1A = 4300.8
    1B = 4915.2

    I also found that NV_ITEM_8044 listed Unknown acts as an NV-READ_COUNTER
    Every time I read it's value the 2nd byte goes up 01,02,03 progressively.