yashsingh1/xdaforums huggingface dataset:
[Moto X Q&A] samwathegreat:
Yes, but these are targeted OTAs. Since no one has shared the files (still) we don't know if these 'targeted OTAs' are device-specific (based on your IMEI, for instance), or if you can apply the 'OTA' to any sprint phone.

Unfortunately, I don't have a Sprint Moto X. Hopefully someone (rooted / bootloader unlocked) can capture this OTA and share it as was requested several months ago.
[Moto X Q&A] MrSaba:
I have rooted and bootloader unlocked Moto X but I am oversea and I cant activate it with sprint account 90 day that I could capture OTA in future but I will be the tester and help developers I will do anything what they say
[Moto X Q&A] rufik:
What about Sprint prepaid? :)
[Moto X Q&A] samwathegreat:
Upon further review, it seems that the OTA unlock modifies the modemst1 and/or modemst2 partitions (which are the equivalent of EFS).

In order to get a better idea of how the OTA unlock works, we could really use the help of a Sprint user who is eligible for unlock (90+ days of service).

If someone is willing to help, please backup your efs following this guide:

http://xdaforums.com/google-nexus-5/development/modem-nexus-5-flashable-modems-efs-t2514095

(under backup EFS) *this is confirmed to work on the Moto X to backup EFS*

Now, once EFS has been backed up, request a SIM unlock from Sprint. After the OTA SIM-Unlock is complete (and hopefully verified to be unlocked), perform ANOTHER EFS backup.

We can use these pre and post unlock EFS backups to do a diff and hopefully determine what mechanism is in place to perform the unlock.

Anyone willing?
[Moto X Q&A] MrSaba:
I have phone but how I can get contract I am oversea and there is not sprint office and I cant sign it personally :(
[Moto X Q&A] samwathegreat:
I doubt you can...besides - by the time you pay for 90 days worth of service, you probably could just buy the GSM unlocked version...

Hopefully someone stateside already on Sprint can help us.
[Moto X Q&A] yar_nl:
Pre unlock efs back up

Well we could do the pre unlock efs back up, if that would help.
[Moto X Q&A] samwathegreat:
Appreciate it, but it is really only useful if we can see what differences there are before and after the official unlock. It **could** be as simple as changing the value of an NV-ITEM, but is likely more complicated than that.

If you would like, you are welcome to go ahead and do the pre-unlock efs backup - it might be helpful as a 'control' for the 'experiment'.

Also useful would be to have a bootloader unlocked / rooted phone running logcat during the official "SIM unlock" procedure.

Any stateside Sprint (SIM unlock eligible) users interested?
[Moto X Q&A] MrSaba:
it will be some progress in this job so we need active sprint user already in contract 90 days and then he can make official unlock after it share backup with developers and they could compare files I think it will be first step in this job
[Moto X Q&A] Stanleywinthrop:
I'm game. I've got a Sprint Moto X and I'm more than 90 days into my contract.

However, a couple of caveats:

1. I don't want to unlock my bootloader.

2. I'm willing to root if necessary, but I want to stay on 4.4.2.

Sorry i'm laying conditions. If this can be accomplished someone send me some directions!
[Moto X Q&A] samwathegreat:
Stanleywinthrop,

1. Unfortunately, without custom recovery you can't backup EFS

2. You -can't- root without unlocking bootloader if you're already on 4.4.2. Unlocking is the only way to get root period on 4.4.2

Thanks anyways...
[Moto X Q&A] crabbyone:
I am willing to root, unlock, what ever to get it working. The only problem I have is I dont have Sprint service to get to the 90 days with to get it unlocked. What is the cheapest way to add it to a Sprint account that will get it to the 90 days so we can get it unlocked? Once unlocked, I can just cancel the service...
[Moto X Q&A] iBowToAndroid:
The only way would be to have a friend or family member activate it on their line in place of their current phone. Even if it's a used phone, Sprint will require a contract if you open a new account/line. Crappy, I know. Hopefully we should have someone available much sooner than 90 days too.
[Moto X Q&A] crabbyone:
I am curious about something. According to this site, the phones are the same (XT1060 and XT 1056)

I looked at other information I could find and this site provides a little more information than the other sites.

w w w.morecellphone dot com/compare/phones/motorola-moto-x-xt1060-vs-motorola-moto-x-xt1056/623289

Can we/is there any way to flash the phone or radios as a Verizon device, thereby unlocking the GSM radio? Maybe someone knows where to find more information on the exact chips used or a teardown for comparison to verify they are the same.
[Moto X Q&A] Vebr137:
Im thinking about hardware change. First idea is to take a broken phone (with broken digitaizer) and use it as a donor. And second idea - what if we change only a GSM chip?

I know that its difficult to take it apart - but I think that its the best way.
[Moto X Q&A] samwathegreat:
The hardware between XT1060 and XT1056 is -similar- but still quite different. These two phones support different frequency bands. For example, the XT1060 supports 700mhz LTE (and a few other LTE bands) while the XT1056 ONLY supports LTE band 25 (1900mhz)

What you have described has been tried already (flashing vzw radio / rom) and does not succeed in sim-unlocking...

Sorry, we will have to find another way.

---------- Post added at 11:20 AM ---------- Previous post was at 11:15 AM ----------

You could most definitely take a GSM sim-unlocked version (like the XT1053, or the XT1058 ROGERS variant) with a broken screen (so long as all other hardware is intact), and "transplant" using a locked variant's GOOD screen....sure.

As far as changing a "GSM" chip - this really isn't feasible due to the surface mount design of the circuit boards. Perhaps this is possible, but you will need several hundred dollars worth of mid to high-end soldering equipment and rework station, and some MAD SKILLS.

Good Luck
[Moto X Q&A] Vebr137:
Thanks)
[Moto X Q&A] freshlyill:
quick back story.. my mom got the sprint moto x for christmas, from motomaker website. Contract free. called sprint a few months ago asking for the unlock code, they tell me it's not locked, since i bought it from motorola. no luck with a gsm sim. chatted with motorola, dude told me there is no way to unlock the sprint moto x for domestic gsm use. that sprint locks it down. i have not called sprint back.. since my mom decided to wait till her existing contracts are up on her family plan, before switching. she's out of town, now, but contracts are up. when she returns, i'll call sprint again and push for an ota unlock. then, i just gotta convince my mom to loan me her moto x, root it, unlock bootloader, lose all her stuff, and submit what i can to xda. we'll see..
[Moto X Q&A] MrSaba:
Really let see we are waiting you :) it give us a hope ;) ;)
[Moto X Q&A] brahda89:
subscribed :D i'm very interested on it :)
[Moto X Q&A] Techno Droid:
I can probably get my hands on this. I just switched to this phone. Yes I know, kinda late.. I'll keep y'all posted. [emoji6]
[Moto X Q&A] MrSaba:
Thanks mand and we will donate your job if you will do this
[Moto X Q&A] jasonbuechler:
Naw, it's still an awesome phone :D

But I will love you forever and be your best friend if you are able to get ysabxe and/or samwathegreat what he needs!! By the way, samwathegreat, are you in regular contact at all with ysabxe, or have you just taken up the cause in his stead? Just curious.
[Moto X Q&A] Techno Droid:
OK I just got off the phone with sprint and got it sim unlocked in 5 mins. Their system says its unlocked and all I have to do is pop in a sim from another carrier and it should work.

Ok, exactly what are the benefits ppl are looking for here?
[Moto X Q&A] samwathegreat:
If you don't have an account with Sprint (as our Overseas friends cannot), or if your phone is not currently activated on Sprint, there is NO possible way of SIM-Unlocking as it is now only done via OTA with Sprint. You also have to meet certain qualifications on the age of your account, and how long the X has been active on it.

Its a shame you didn't come here first and do the Pre/Post-Unlock EFS backup to help the cause here....we may well have been on our way to finding a SIM-UNLOCK exploit...

---------- Post added at 09:27 PM ---------- Previous post was at 09:16 PM ----------

I am not (nor have I been) in contact with ysabxe. It seems he has not posted in this thread since February, so either he has given up on the idea, or is busy with other projects.

Nonetheless, I am also interested in pursuing a SIM-Unlock exploit. I do NOT have an XT1056, I actually have a Republic Wireless XT1049, which has EXACTLY the same hardware (Same FCC ID) as the 1056, and uses the same SIM-Lock methods. The only difference is while XT1056 users who meet certain criteria CAN get OTA-Unlocked, Republic Wireless will NOT EVER unlock their phones.

If we find an exploit of some kind for the XT1056, it WILL work on the RW XT1049 as well, unlocking the GSM bands. This is why I have an interest in it.

Now some of our Chinese friends have developed a Sim-Unlock solution of some kind. There is a service for sale on taobao.com offering XT1056 unlock, but you must send them your phone. This is no doubt because they want to protect their method in order to make more $$$...

The only details we have gotten from them is that once 'they' unlock your XT1056, you cannot erase the 'modemst1' or 'modemst2' partitions or the device will be locked once again. Knowing this, we are rather certain that if we can figure out *what changes are made* to the modemst partitions by the OTA-Unlock, we MAY be able to duplicate it.

Thanks for your interest.

Soon, hopefully someone (Rooted, Bootloader Unlocked, AND Sim-Unlock eligible) will be able to provide us with PRE and POST Unlock EFS backups.
[Moto X Q&A] Techno Droid:
i am currently with sprint. i had an iPhone and switched from it bc i was missing my nexus 5. so, instead i bought a moto x. i just simply called and asked for my phone to be sim unlocked because i was traveling outside the us. they said that in their system that it shows as unlocked. now i didn't receive any ota for the sim unlock. am i missing something here?
[Moto X Q&A] samwathegreat:
The "OTA" is not like an 'update OTA' that you are used to. It is called an OTA because...well...it's sent "Over The Air".

Sprint uses "OMA-DM" to apply the SIM-Unlock. It is the same method they use to provision your voice and data when you first activate the phone. You can read about OMA-DM here: http://en.wikipedia.org/wiki/OMA_Device_Management

This is VERY different from the methods other carriers, such as AT&T use, with an actual SIM-Unlock CODE, that is input into the device itself to unlock.

Also of note: It is reported that even after the "Sim-Unlock", that it still isn't possible to use the Sprint XT1056 domestically. Other users have reported that the SIM-Unlock does unlock for international carriers, but remains locked for domestic carriers (AT&T / T-Mobile).

Since you are unlocked, perhaps you can put this debate to rest for us. Are you able to use a domestic SIM (AT&T / T-Mobile) or not?

Thanks.
[Moto X Q&A] Techno Droid:
thanks for the heads up. I will stop in to T-Mobile tmrw and pick up a sim card and prepaid plan to test it out. I have to head out to work in a bit here.
[Moto X Q&A] iBowToAndroid:
Even if Sprint unlocks it, it will not work in the US as domestic carriers are blocked out.

You need to complete the unlock via Settings->System Updates->UICC Unlock. But DO NOT DO IT YET. If you can bootloader unlock and root, and submit the needed dumps, you may be able to help the developers find a SIM unlock method. Read the thread for details.

The user still needs to do the UICC Unlock as mentioned above. Domestic carriers will never work unless additional steps are taken, beyond the unlock that Sprint provides

Don't bother. Won't work. Waste of time. Unfortunately...
[Moto X Q&A] MrSaba:
Hello guys I live outside US in Republic of Georgia and I have sprint locked Moto X and I already unlock bootloader and rooted too and I will be tester :)

sorry for my bad English
[Moto X Q&A] Techno Droid:
Sprint doesn't unlock via ota. They don't support have the tools for that. A buddy of mine works in tech support. Unlock for international use only.
[Moto X Q&A] rufik:
So how is it done? I mean international unlock, cause there are a few guys in Europe with SIM-locked Sprint Moto...
[Moto X Q&A] samwathegreat:
They DO unlock via OTA (OMADM).

Search the LG G2 forums. People have actually ran LOGCAT while sprint sent the OTA-unlock commands to the phone. Your buddy is just too low tier support to know about it...

As I said previously, OMADM is the same method they use to provision your voice and data. If they didn't 'have the tools for that' then none of us on Sprint would be talking or using data on our phones...

We already believed that the OTA only unlocked for international use, and [MENTION=3163377]iBowToAndroid[/MENTION] seems to have confirmed that for us.
[Moto X Q&A] Techno Droid:
Oh.. Poop.
[Moto X Q&A] MrSaba:
is there any news ?
[Moto X Q&A] J_McBurst:
Lets see if anyone can sum this thread up

I have this bad boy as a wonderful 4.7" tablet. I like it, but oh would I love to have it as a phone.

I got it off ebay and, well, you know how it goes - boy buys phone, boy falls in love with phone, asshole seller stops paying the contract after the 30 day grace period.

From what I gather so far - there's plenty of money vouched for devs, no go so far.

GSM should work outside the US (fine with me).

The China internets might be able to crack it, we can't crack Chinese.

Finally, someone needs to unlock their bootloader, root and do Pre/Post-Unlock EFS backup. Then, we may have a chance at it.

So... what's up?

I get it that some sprint users fear for their warranty, what if we start a separate fund for the owner. A new Moto X is ~350.

I'll put down 20 for dev + 20 for moto owner. We need ~10 more people to vouch this much and I think we can provide a safety net for owner..

Game own?
[Moto X Q&A] MrSaba:
there are many people who puts 20$ for this project but we need active users
[Moto X Q&A] Vivjen:
Which address my RW and Sprint phones might be sent?)
[Moto X Q&A] samwathegreat:
I haven't a clue! You would need to ask the people on Taobao.....I'm not offering this service.

If you DO decide to have one unlocked via Taobao (it's not cheap...), I recommend just sending them ONE sprint phone.

You can do the PRE and POST unlock EFS backups on that phone, and we may be able to find the SIM-Unlock solution!

If we do, you will be able to unlock the rest of your Sprint/RW phones yourself...

The problem here has been that we can't get anyone to participate. Its simple enough.....if you are a sprint customer, unlock your BL, and make an EFS backup. Next, Call Sprint and request unlock. Once confirmed to be unlocked, make the POST-Unlock EFS backup.

Unfortunately, we can't seem to get any Sprint customers interested...
[Moto X Q&A] Vivjen:
I have both so you can see from the pic that logic boards are different, but not so significantly as XT1058 with XT1053. Part's numbers are not the same
[Moto X Q&A] samwathegreat:
Thanks for the pic Vivjen,

I can't see much detail from the photo, and it appears one of the units has the bezel removed and one does not.

Because the FCC IDs are the same (RW & Sprint version), the FCC requires that the hardware be identical....otherwise Moto would HAVE to get the RW model certified separately by the FCC (and it would have a different FCC ID).

Moto, like nearly all other manufacturers, has refined the manufacturing process and sourced identical parts from different vendors throughout production of the X. Additionally, sometimes the vendors will revise their design during production and assign a new part number to individual parts.

More than likely, the differences you have noted are due to this. It doesn't change any functionality, however.

In much the same way, nearly all laptop manufacturers will source LCD screens from multiple vendors. Three individuals with the same model laptop -could- have LCDs from 3 different manufacturers - all of which are compatible and function the same.

Additionally, individuals have reported success flashing both the Sprint variant and the RW variant to PagePlus (CDMA). Flashing the RW model requires an unlocked bootloader, and the Sprint ROM must be flashed to the RW variant in order to be able to flash it to PagePlus.

Now to find a GSM unlock solution.....

Do you plan to send one or more of your phones to the Taobao seller? If so, we would appreciate it if you could do the pre/post EFS backups so that we might discover the unlock solution.

Thanks for your interest!!!
[Moto X Q&A] Vivjen:
Sprint's variant used in Ukraine right now on Intertelecom's (CDMA?) cellular. Unfortunately, I have no any details about, but I could check if needed.

I could send them without any problems (they don't costs me anything), but I will very appreciate any EFS backup manual in order to make copy in advance. I have never made such things before
[Moto X Q&A] samwathegreat:
Yes, intertelcom appears to be a CDMA carrier. We already know we can flash Sprint XT1056 to any CDMA carrier without modification. What we are interested in is being able to use it on GSM carriers.

If you DO decide to try the Taobao "XT1056 SIM-Unlock" service then we would be interested in getting the EFS backups. If you decide to do this, let me know and I'll provide you with the procedure for backing up EFS.

We don't need an EFS backup for the phone you are using on the CDMA carrier though....we can already achieve this without finding an 'exploit'. You can simply follow the directions in the "Flash Sprint Moto X to Page Plus" thread to flash it to any CDMA carrier that will allow you to bring your own device.

Edit: Follow these instructions to perform the EFS backups: http://xdaforums.com/google-nexus-5/development/modem-nexus-5-flashable-modems-efs-t2514095

Yes, the thread is for the Nexus, but the same exact procedure is confirmed to work on the Moto X. You will need to make one backup BEFORE you get unlocked, and a second backup AFTER unlock. We can compare the two backups to see what changes have been made (and possibly duplicate them).
[Moto X Q&A] Vivjen:
Unfortunately my TWRPs have no option to make EFS backup
[Moto X Q&A] :
Won't sharing efs backups with people advertise your imei?

Just so people are aware? Or correct me if I'm wrong. :)
[Moto X Q&A] samwathegreat:
Thats what the update script is for on the thread I linked. You "apply update" and open the zip and it creates your EFS backup for you. It doesn't modify anything.

---------- Post added at 08:47 PM ---------- Previous post was at 08:46 PM ----------

I don't believe it does, but it is a valid concern. I will have a look at mine with the HEX editor when I have a moment and check...
[Moto X Q&A] samwathegreat:
Although my Modemst1 and Modemst2 partitions don't -appear- to include my IMEI anywhere, all of the relevant docs say that EFS does contain such information....so I will say that you *could* be sharing your IMEI if you choose to submit EFS dumps.

No more risky than sending your IMEI to the china middleman though....we here at XDA aren't going to do anything with your IMEI info...

Thanks
[Moto X Q&A] alexh3791:
I think I'm willing to help out on this project. I have been debating unlocking my bootloader for a while, and the Sprint techs in my local store really don't seem to care about rooted devices.

Will this possibly allow a SIM unlock to be created that actually works for US carriers, too?

(Also, if I get my bootloader unlock code, can I lock/re-lock it at will?)
[Moto X Q&A] samwathegreat:
Well the ultimate goal here is to duplicate the changes Sprint makes when they OTA-Unlock your phone. That means international only. I don't want to say it isn't possible to unlock for domestic use, but it would require modification beyond what the OTA-Unlock does...

If you get your bootloader codes, you can unlock and re-lock at will, but you will never get back to "Status Code 0 Locked". Once you are unlocked, it shows "unlocked", and if you subsequently re-lock it will show "re-locked".
[Moto X Q&A] MrSaba:
guys don't forget about me I will be active user with this project I have simlocked Moto X 1056 and I am in Republic Of Georgia I already activated this phone on CDMA network but I want that it works on GSM so I will be active tester I have unlocked bootloader and rooted
[Moto X Q&A] samwathegreat:
:good:
[Moto X Q&A] Kittiesoncrack:
I can help out with this project as well. If a dev is willing to commit, I can make a efs backup without unlock and with unlock. All i have to do is call Sprint and ask. I have a had good luck with them in the past with sim unlocks so yeah.

Edit: Alright so here is what I'm doing: Im going to make a efs backup using this: http://xdaforums.com/google-nexus-5/development/modem-nexus-5-flashable-modems-efs-t2514095, then make a full twrp backup. Call Sprint and get the unlock, Make another efs backup, and then other full twrp backup. I will upload to Google Drive and share with a dev whos willing to work on this
[Moto X Q&A] Vivjen:
So sending of my Sprint to China is not needed anymore? I have esf backup already. I could share it if needed. I'm ready for beta tests as well.
[Moto X Q&A] grafyman:
Very good.
[Moto X Q&A] hsngt:
on the boat :D

Hi everyone

I'm new to the xda comunity but I've been following this thread for quite sometime now. I bought my Moto x sprint off ebay (like the most of who are here (-_-") thinking I might get a shot on unlocking it with a unlock code from one of those webs. Anyways, I'll cut to the chase, Im from saudi and that put me with the guys from overseas, and I'm welling to be a tester :D.

I just want to share with you all what I've accomplished, as you all know that the phone had a sprint firmware, and it only had english and espaniol. So, what I did was unlocking the bootloader, rooting it and then manually flashing the Asian firmware (for having it my language) using this thread http://xdaforums.com/moto-x/general/guide-moto-x-return-to-100-stock-using-t2446515. After I did that, I noticed that the IMEI was gone, so I flashed back to the stock firmware (sprint) and then backed up the EFS files, flashed back again the different firmware and flashed the EFS files back. WALAH, I got the firmware that I want with keeping my IMEI. Of course, all that didnt effect the fact that the phone can't register to the networks (it can see it but can't register), but thats why Im in with you on this boat.

So, I'm ready for what ever you guys might need.

BTW, how are you going to be able to read or edit the EFS files??! I wish if someone can explain that to us, we might have a shot playing with :p

Thanks guys and we will do it:good:
[Moto X Q&A] samwathegreat:
Thanks for the useful info, hsngt!

As far as reading/editing the EFS file, it is quite easy with a HEX-Editor. We know that the EFS partitions appear to be encrypted to hell, but I have also just discovered that EFS is somehow randomized....this could be bad news for us.

According to reports in other forums, EFS is constantly changing. Users report that if they make an EFS backup, and then reboot into in Android, the next EFS backup is totally different than the first, with different checksums and data.

This may complicate things for us....the key to the SIM-Lock definitely appears to have something to do with the EFS partitions. It appears that FSG.mbn is supposed to be a 'master backup' of the Modemst1 (and it does not change). We aren't sure if the OTA-Unlock modifies the fsg.mbn partition though.

This is alot to try to digest...I'm really hoping we can get another interested DEV to have a look and see if we are missing something....
[Moto X Q&A] Vivjen:
There is no need to flash phone fully for adding languages. We have translated European firmware even in Russian. Just Safestrap or any another recovery needed to flash ZIP files within few seconds. I'ld post these files if someone needed