G950U TMB - Emergency Calls only after unlock
 

Hello. I got a G950U TMB in my hands, which was supposed to be brand new and unlocked by somebody.
This phone gets the sim card but gets no network, emergency calls only. The IMEI is definitely not blacklisted, this is checked by changing the imei in another test phone, which worked.
It does not show invalid sim card error or the TMB message that says "this device can be remotely unlocked". The device unlock app is not disappeared, as i believe it should after a successful unlock, and when tried to unlock via app it says it cannot connect to server, although it is connected to internet via wifi.
The imei and baseband are visible in phone info and via *#06#.
Have already tried:
1) TMB unlock again via z3x (fails at calculation (error 4), sometimes did not even boot to ramdump interface and timed out)
2) flash older and newest firmware again
3) factory reset

weird thing is that when booting to recovery, it says "E: ensure_path_unmounted failed to unmount /efs (device or resource busy)"

is it possible that the first unlock did not go well and now it has problem with the efs?any suggestions?thank you in advance.

Bro check *#0011# mipi if pass succes or failled

Sent from my Le X829 using Tapatalk

it says mipi test success.
p.s. never rooted, knox status 0

Can you take a screenshot or recording a movie clip of your current symptoms share to here? Many Pro or z3x staff will review your problems. I am not a Pro. But if I can support for you I will do it. [emoji3]


Sent from my SM-G955F using Tapatalk

ok i uploaded a video in youtube:

the z3x log of trying to unlock again (sometimes did not go into ramdump):

[ Τρι 13 2 2018 11:42:00 πμ ] Waiting ADB device... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Reading phone info...
[ Τρι 13 2 2018 11:42:00 πμ ] Model: SM-G950U
[ Τρι 13 2 2018 11:42:00 πμ ] Android version: 7.0
[ Τρι 13 2 2018 11:42:00 πμ ] Product code: Not Active
[ Τρι 13 2 2018 11:42:00 πμ ] Phone version: G950USQU2BQK5
[ Τρι 13 2 2018 11:42:00 πμ ] PDA version: G950USQU2BQK5
[ Τρι 13 2 2018 11:42:00 πμ ] CSC version: G950UOYN2BQK5
[ Τρι 13 2 2018 11:42:00 πμ ] CSC country code: USA
[ Τρι 13 2 2018 11:42:00 πμ ] CSC sales code: TMB
[ Τρι 13 2 2018 11:42:00 πμ ] HW version: MSM8998.00
[ Τρι 13 2 2018 11:42:00 πμ ] Phone SN: RF8JC1NGP2J
[ Τρι 13 2 2018 11:42:00 πμ ] Chip name: MSM8998
[ Τρι 13 2 2018 11:42:00 πμ ] Modem board: MSM8998
[ Τρι 13 2 2018 11:42:00 πμ ] Security patch: 2017-11-01
[ Τρι 13 2 2018 11:42:00 πμ ] RF cal date: NONE
[ Τρι 13 2 2018 11:42:00 πμ ] IMEI: 353112091106159
[ Τρι 13 2 2018 11:42:00 πμ ] Waiting for device to become ready... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Initialization zTool... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Running zTool, please wait...
[ Τρι 13 2 2018 11:42:00 πμ ] Start... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Initialization... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Generate and check client proof... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Verify proof by client... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Reading data from phone... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Rebooting to upload... OK
[ Τρι 13 2 2018 11:42:00 πμ ] Searching Ramdump interface... COM16 detected
[ Τρι 13 2 2018 11:43:00 πμ ] Reading data from phone... OK
[ Τρι 13 2 2018 11:43:00 πμ ] Calculating... error (4)

Provided Youtube link may be broken.
Can you check it one more?

I can see below URL is you uploaded Youtube url.

https://i.imgur.com/r7F070L.png

system says that i cannot post url links. maybe i am doing something wrong..in youtube url just paste this watch?v=_EIHPMb_fus

Bro u tried reflash and factory reset

IF YOU LIKE WHAT I POST PRESS[emoji173] THANKS BUTTON

i had the video set to private. sorry. now it must work. i have reflashed previous and newest version, also have tried factory reset. nothing.

Flash factory binary check if it gets service, try re unlock on factory binary

after flash stock with regular CSC NOT home csc

Since you are here, what is different between regular CSC and HOME CSC?

As far as I know CSC is nothing related to the unlock or service. It is just consumer sale code

Found one suspicious point of your symptoms.

Here is one of success z3x log and you can see it has valid RF Cal.date value

https://uploads.tapatalk-cdn.com/201...eb92045441.jpg

But your log indicated RF cal date is None or invalid value.

https://uploads.tapatalk-cdn.com/201...a4c9d427b1.jpg

I known this RF cal data is very important for catch signal.

Can you capture the screenshot which run this code "*#12580*369#" in Dialer?

If once triggered this code you can see below screen.

https://uploads.tapatalk-cdn.com/201...3ef98d4079.jpg

Sent from my SM-G955F using Tapatalk

in factory binary it does not get signal again, it says rf cal none in sw info, and z3x does not let me unlock it in that mode.

*#12580*369# does not work in factory firmware.

is there a way to repair this rf cal thing?

i am reading that erasing efs in factory and restoring with original imei does the job, but i am not sure how to do this or if it is dangerous.

thank you for your interest!;)

Regarding that efs mount message on Recovery, it appeared since G950U / G955U BL2(Bootloader Rev.2), But it just fees warning, Not affect to catch signal.
Because I have G950U ATT and this device also display same warning message on recovery.
But it worked like a charm.

I have only knowledge of IMEI(EFS) repair, which flash Combination binary then Dial *#06#. This method introduced from XDA titled with
"[GUIDE] How to fix IMEI / DRK issues " <== Google keyword

I hope to find out also how to restore RF cal (Calibration) data.
Who knows restore RF Cal data without knox tripped?

is there a problem if the knox gets tripped? even if there is, wouldnt it be better to trigger the knox but have a working phone? :)