[Motorola Droid 4] biktor_gj:
Hi everyone, first of all sorry if this has been discussed, but couldn't find it... I've been looking for this stuff here at xda and at droidforums but couldn't find any work in progress on this, besides the Kexec patches.

I must say I haven't bought a Droid 4 yet, but I'm desperate to get a keyboard back since my n900 broke.

So,I've been looking for know bootloader unlocking methods, mostly because I hate locked stuff and had enough with the good old X10. Couldn't find anything, so I downloaded some random firmware update for the Droid 4. I downloaded 6.7.2-180_DR4-16_M2-37

Blur_Version.6.16.217.XT894.Verizon.en.US from here, and got my hex editor running and looking at mbm and mbmloader.bin

Then I found this on mbm.bin (which I assume is the second stage loader after the mbmloader) (512Kb file with a lot of FF padding at the end):

mot_sst_oem_lock_handler
detect_vol_key_press
vol key pressed
scroll vol down
display confirmation screen
vol key: send display command
display page %d
confirm vol down
cancel!
unlock!
unlock failed!
in lock handler
Lock/Unlock already executed
display agreement
in unlock handler
msg_len at handle_unlock_ui: %d %d
last_page %d:
In order to unlock the bootloader on your device, you must
read and accept the following legal terms. If you agree with
the terms, choose "I agree" which will create a binding legal
agreement between you and Motorola Mobility, Inc. and your
wireless carrier/retailer. If you do not agree with the
terms, or wish to abort, please choose "Cancel".
PROCEED WITH EXTREME CAUTION--LEGAL AGREEMENT
You have requested to unlock your device's bootloader.
Unlocking the bootloader allows access to administrative
privileges, including the ability to make modifications to the
device, not normally accessible to the end user. Unlocking
the bootloader allows you to make modifications to the
pre-loaded software, including modifying or even replacing the
entire operating system. Once you unlock the bootloader, you
will not be able to return the device to its original locked
bootloader state. MOTOROLA STRONGLY RECOMMENDS AGAINST
UNLOCKING THE BOOTLOADER AND/OR ALTERING A DEVICE'S SOFTWARE
OR OPERATING SYSTEM. Unlocking the bootloader and/or running
software or operating systems other than those supplied by
Motorola can cause your device to be unsafe, cause your device
to malfunction, render your device inoperable, and/or
otherwise permanently damage your device. Unlocking the
bootloader and/or modifying any software or operating system
voids your warranty.
By choosing "I Agree", You acknowledge, understand and agree
that:
(1) You are a software developer, and understand and assume
all risks associated with unlocking your device and/or
altering Your device's software or operating system, including
but not limited to those outlined herein; and
(2) You are waiving all rights and benefits under any warranty
supplied with the device or otherwise, which shall be rendered
void as a result; and
(3) Any data You have previously saved on this device will be
erased and unrecoverable; and
(4) You will not make or enable any changes to the device that
will impact its grant of equipment authorization, or any other
regulatory compliance. The equipment authorization grant is
based on the device's emission, modulation, and transmission
characteristics, including: power levels, operating
frequencies and bandwidths, specific absorption rate (SAR)
levels, duty-cycle, transmission modes (e.g., CDMA, GSM), and
intended method of using the device (e.g., how the device is
held or used in proximity to the body); a change to any of
these factors will invalidate such grant with respect to your
device. IT IS ILLEGAL TO OPERATE A TRANSMITTING DEVICE
WITHOUT A VALID GRANT; and
(5) Unlocking, and/or altering a device's software or
operating system may:
a) Disable your device's emergency features, including use for
Emergency Assistance, e.g., 911 or equivalent; and
b) Adversely affect the operation of the device, including
rendering the device, in whole or in part, inoperable, and/or
causing permanent damage to the device; and
c) Cause the device to overheat, exceed SAR values, exceed
safe volume settings, and otherwise be unsafe, including
creating the potential to cause bodily injury; and
d) Cause applications, software and other content previously
installed on the device or accessible by your device to be no
longer accessible, or to malfunction; and
e) Cause software upgrades to malfunction, be unavailable,
and/or render your device inoperable.
(6) You hereby release and hold harmless Motorola Mobility,
Inc., its affiliates, and the wireless carrier/retailer that
sold you the device and/or whose wireless service you utilize
("Wireless Carrier"), all of which are intended third party
beneficiaries of this legal agreement, and their respective
officers, employees, agents, successors and permitted assigns
("Released Parties"), from any liability whatsoever, including
all claims, suits, obligations, causes of action, liabilities,
costs, and damages (including without limitation injuries to
persons and damages to property, and products liability
claims) even if the Released Parties knew, or should have
known about the possibility of such damage. You further
acknowledge and agree that the foregoing release shall remain
in effect, regardless of whether you relock your device,
and/or reload the original, unmodified software or operating
system.
(7) You authorize Motorola and/or your Wireless Carrier to
disable your device and/or its connection to a wireless
network in the event such device is, in Motorola's or the
Wireless Carrier's sole determination, causing, or is likely
to cause, harm to Motorola, the Wireless Carrier, the wireless
network, or other subscribers on the wireless network.

The foregoing agreement shall supersede any conflicting terms
or conditions originally provided with this device. By
clicking "I Agree" I acknowledge and agree that I am creating
a binding legal agreement.
You are about to ** LOCK ** your device. Once locked, only the
latest authorized software image can be loaded onto the device.
IMPORTANT NOTE: Authorized images must be loaded BEFORE the
device is re-locked and any data you have previously saved will
be erased. You may obtain copies of such software from:
http://developer.motorola.com

Has anyone seen this or are working on it?

Edit: oh!, and I also found this:

s - %d
%s: failed to update utag (%d): %d
utag update failed
%s: failed to write updated utags: %d
utag write failed
%s: Unable to allocate response string!
out of memory
%s: unable to find utag (%d)
utag is not programmed[B]
fastboot oem lock disabled!
Device is already locked!
fastboot oem unlock disabled!
Device is already unlocked![/B]
-reset
PN: %s, RV: %d, Idx: %d, CG: %d
md5: %s

Edit again: It seems like version VRZ_XT894_6.5.1-167_DR4-1_M1-219_1FF_01 has also the same legal agreement inserted into the mbm...

000237b0 6b 5f 75 69 3a 20 25 64 20 25 64 0a 00 6c 61 73 |k_ui: %d %d..las|
000237c0 74 5f 70 61 67 65 20 25 64 3a 00 49 6e 20 6f 72 |t_page %d:.In or|
000237d0 64 65 72 20 74 6f 20 75 6e 6c 6f 63 6b 20 74 68 |der to unlock th|
000237e0 65 20 62 6f 6f 74 6c 6f 61 64 65 72 20 6f 6e 20 |e bootloader on |
000237f0 79 6f 75 72 20 64 65 76 69 63 65 2c 20 79 6f 75 |your device, you|
00023800 20 6d 75 73 74 00 72 65 61 64 20 61 6e 64 20 61 | must.read and a|
00023810 63 63 65 70 74 20 74 68 65 20 66 6f 6c 6c 6f 77 |ccept the follow|
00023820 69 6e 67 20 6c 65 67 61 6c 20 74 65 72 6d 73 2e |ing legal terms.|
00023830 20 20 49 66 20 79 6f 75 20 61 67 72 65 65 20 77 | If you agree w|
00023840 69 74 68 00 74 68 65 20 74 65 72 6d 73 2c 20 63 |ith.the terms, c|
00023850 68 6f 6f 73 65 20 22 49 20 61 67 72 65 65 22 20 |hoose "I agree" |
00023860 77 68 69 63 68 20 77 69 6c 6c 20 63 72 65 61 74 |which will creat|
00023870 65 20 61 20 62 69 6e 64 69 6e 67 20 6c 65 67 61 |e a binding lega|
00023880 6c 00 61 67 72 65 65 6d 65 6e 74 20 62 65 74 77 |l.agreement betw|
00023890 65 65 6e 20 79 6f 75 20 61 6e 64 20 4d 6f 74 6f |een you and Moto|
000238a0 72 6f 6c 61 20 4d 6f 62 69 6c 69 74 79 2c 20 49 |rola Mobility, I|
000238b0 6e 63 2e 20 61 6e 64 20 79 6f 75 72 00 77 69 72 |nc. and your.wir|
000238c0 65 6c 65 73 73 20 63 61 72 72 69 65 72 2f 72 65 |eless carrier/re|
000238d0 74 61 69 6c 65 72 2e 20 20 49 66 20 79 6f 75 20 |tailer. If you |
000238e0 64 6f 20 6e 6f 74 20 61 67 72 65 65 20 77 69 74 |do not agree wit|
000238f0 68 20 74 68 65 00 74 65 72 6d 73 2c 20 6f 72 20 |h the.terms, or |
00023900 77 69 73 68 20 74 6f 20 61 62 6f 72 74 2c 20 70 |wish to abort, p|
00023910 6c 65 61 73 65 20 63 68 6f 6f 73 65 20 22 43 61 |lease choose "Ca|
00023920 6e 63 65 6c 22 2e 20 00 50 52 4f 43 45 45 44 20 |ncel". .PROCEED |
00023930 57 49 54 48 20 45 58 54 52 45 4d 45 20 43 41 55 |WITH EXTREME CAU|
00023940 54 49 4f 4e 2d 2d 4c 45 47 41 4c 20 41 47 52 45 |TION--LEGAL AGRE|
00023950 45 4d 45 4e 54 00 59 6f 75 20 68 61 76 65 20 72 |EMENT.You have r|
00023960 65 71 75 65 73 74 65 64 20 74 6f 20 75 6e 6c 6f |equested to unlo|
00023970 63 6b 20 79 6f 75 72 20 64 65 76 69 63 65 27 73 |ck your device's|
00023980 20 62 6f 6f 74 6c 6f 61 64 65 72 2e 20 00 55 6e | bootloader. .Un|
00023990 6c 6f 63 6b 69 6e 67 20 74 68 65 20 62 6f 6f 74 |locking the boot|
000239a0 6c 6f 61 64 65 72 20 61 6c 6c 6f 77 73 20 61 63 |loader allows ac|
000239b0 63 65 73 73 20 74 6f 20 61 64 6d 69 6e 69 73 74 |cess to administ|
000239c0 72 61 74 69 76 65 00 70 72 69 76 69 6c 65 67 65 |rative.privilege|
000239d0 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 |s, including the|
000239e0 20 61 62 69 6c 69 74 79 20 74 6f 20 6d 61 6b 65 | ability to make|
000239f0 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 20 74 | modifications t|
00023a00 6f 20 74 68 65 00 64 65 76 69 63 65 2c 20 6e 6f |o the.device, no|
00023a10 74 20 6e 6f 72 6d 61 6c 6c 79 20 61 63 63 65 73 |t normally acces|
00023a20 73 69 62 6c 65 20 74 6f 20 74 68 65 20 65 6e 64 |sible to the end|
00023a30 20 75 73 65 72 2e 20 20 55 6e 6c 6f 63 6b 69 6e | user. Unlockin|
00023a40 67 00 74 68 65 20 62 6f 6f 74 6c 6f 61 64 65 72 |g.the bootloader|
[...]