yashsingh1/xdaforums huggingface dataset:
[Moto X General] samwathegreat:
Your devices are bootloader-unlocked.... You don't need an exploit to root an unlocked device. Getting root on 4.4.4 is as simple as flashing twrp, booting into it, then clicking exit. When you go to exit twrp, it will offer to root for you.

You can root any android version with an unlocked BL. :)
[Moto X General] ezeuba:
Really? I didn't know this before now. Enabling the update prompt again, updating and will feedback soon if the spc utility works.

Thanks.
[Moto X General] samwathegreat:
Read the threads on taking otas first. You must have stock recovery and you must uninstall xposed. You can leave the modules installed....

Once updated, you can reinstall xposed. Your modules and settings should remain intact.

Also, the ota won't install (probably) if you have removed any system apks (omadm).

Really the easiest way is to flash the entire system.IMG and recovery.IMG from the stock, unmodified 4.4.2 sbf. Then take the ota. Then afterwards you can flash twrp, root, and remove the omadm apk and reinstall xposed. All your data and xposed modules should remain intact.

I suggest writing down your spc first, just in case.
[Moto X General] rushuckster:
Greetings from Russia. I want to thank you for this big work for unlocking sim at sprint Moto X XT1056. Big thanks for your simple step by step instructions, all is working perfect on my Moto XT1056 with all russian cell operators (MTS, BeeLine,TELE2, Megafon), all GSM functions works fine (MMS, SMS, USSD, 3G). Thank you very much, 1 year of waiting and this is happened, you're wizard. (Motorola MOTO X XT1056 Sprint Android KitKat 4.4.4 212.44.28)
[Moto X General] abhishekpujar:
Hi, first of all huge thanks for making the unlocking possible. I followed this method and got to use the Moto x on GSM carriers in India and it was all fine till today. After an OTA the phone wont go past the motorola boot logo now. When i try to power on the device, the Moto logo shows up and then it revolves a couple of times and the phone shuts down (Powers off completely, not a boot loop). I tried doing a factory reset from the stock recovery several times also i tried clearing the cache too. Still the same problem? Is there any way i can rectify this? This has nothing to do with the unlocking we did?
[Moto X General] samwathegreat:
Absolutely nothing to do with unlock. I suggest posting in the debricking thread. We can't help you here...

Good luck
[Moto X General] abhishekpujar:
Alright. Thanks for the reply! :good:
[Moto X General] lifemac3:
I just bought the phone as it was which had directly from sprint. I've never flashed a ROM or anything like that. It's completely as new.

Maybe it's because the phone has never been registered on the Sprint network as when I turn it on it says "Activating" Please wait until complete but it won't activate so I just have to click on the "skip" button. I think therefore it's not activated on Sprint.

I have never done anything to this phone though it is completely as new. It still works fine using wifi. When I put in a non sprint sim it says sim not recognised. But with the sprint one in it's fine but obviously no good to me as I'm in the UK and it when even let me call sprint from the phone!

I disabled diag mode but I got the same thing.

I can skype you if that will help? How do I reboot into fastboot mode? Is this something in developer options?

Thank you.
[Moto X General] samwathegreat:
Fastboot mode has nothing to do with developer options. I suggest you don't run the command I suggested if the phone has never had a ROM flashed. It probably has something to do with being on 4.4.4 - let's wait for [MENTION=2026715]ezeuba[/MENTION] to confirm if you are able to read the SPC on 4.4.4.

Afterwards, we may have some options. The activation screen can be disabled, but it has nothing to do with not being able to read the SPC - ezeuba has never-activated devices and he was able to read the SPC on them (but they are on 4.4.2).

Hang tight until we get some kind of confirmation. You might try doing a factory reset, and then trying the SPC reader. Don't enable diag mode at all after the factory reset unless you are able to read the SPC.

Since it has worked for -everyone-, the problem has something to do with your phone. Again -- maybe the fact that you are on 4.4.4 already. Sprint may have updated it so that reading the SPC is impossible now?
[Moto X General] Vekhez:
I had this problem too.

What you need to do is download the stock SPRINT 4.4.2 SBF. Flash that, wiping the phone and everything, bring it back to 100% even formatting the modemst partitions. Then complete the unlock. And flash the T-Mobile or Verizon latest firmware update. This will get rid of all the activation stuff.

More details on it here: http://xdaforums.com/showpost.php?p=54891555&postcount=248
[Moto X General] samwathegreat:
[MENTION=5427457]Vekhez[/MENTION] : he is already on 4.4.4 -- you are suggesting that he downgrade. You realize there is great potential to brick if you downgrade, right?

When you did that procedure, you were on 4.4.2!

Did you have issues reading the SPC??
[Moto X General] Vekhez:
Omg; didn't notice that. Download the 4.4.4 OTA and take the gpt.bin from that.

I was on 100% sprint stock when I completed the unlock and then flashed to Verizon's 4.4.4.
[Moto X General] jairal:
Fatal Error here too

I'm also on 4.4.4 having the same problem. Has anyone tried downgrading then unlocking??? Just when I thought I could finally use my Moto X :(
[Moto X General] Vekhez:
Maybe if you flash the 4.4.2 RADIO (from SBF) and then find a ROM that is 4.4.2 SPRINT based and the inside of the zip DOES NOT have a motoboot.img OR gpt.bin.
[Moto X General] samwathegreat:
Yeah guys, DON'T DOWNGRADE YOUR ROM.

Here's the deal: If you are an INTERNATIONAL USER, you can follow my procedure to JUST FLASH the nv-unlock.txt file.

This mimics the Official Sprint unlock. The SPC **is not required** to write the international unlock file (nv-unlock.txt).

The disadvantage of this is: The phone will switch back to CDMA after every reboot -- you will need to go to Settings > More > Mobile Networks, and switch it back to GSM/UTMS. You will have to do this after EVERY reboot.

If this isn't a big deal, SKIP THE SPC PART, and just flash the ONE nv-unlock file.

The rest of the files are to LOCK the phone to GSM -- so it won't switch back after every reboot. They DO REQUIRE the SPC to write.

So there is option 1 ^

Option 2: Try to flash the 4.4.2 MODEM:

fastboot flash modem NON-HLOS.bin

fastboot erase modemst1

fastboot erase modemst2

fastboot flash fsg fsg.mbn

fastboot reboot

NOW, see if you can use the SPC utility. I'm not sure if this will work.....It could be something in android itself that is preventing the SPC from being read on 4.4.4. Your only option might be option 1.

If anyone is on 4.4.2 now, DON'T UPDATE UNTIL AFTER YOU ARE UNLOCKED!!!!!!!!
[Moto X General] joel_sinbad:
Well... You can downgrade if you skip the motoboot.img, that's the bootloader... But I think its safe to flash the system.img for downgrade to 4.4.2,
[Moto X General] bestrafer:
for those who does not know their SPC being on 4.4.4

1. unlock your bootloader

2. take 4.4.2 xml.zip, remove the following lines with gpt.bin and motoboot.img and flash via rsdLite

3. read your MSL on 4.4.2 and remember it

4. now you can update back to 4.4.4 and use MSL from the step.

5. enjoy
[Moto X General] ezeuba:
Please do not advocate this line of action. Anyone on 4.4.4 WILL SOFT BRICK by flashing 4.4.2 system.img, this happened to me after taking the 4.4.4 OTA. I could only resurrect my phone by a kind of "franken-flashing" a VZW 4.4.4 system.img and then using a backup I stored on my computer to restore back to 4.4.2, after which I again took the 4.4.4 OTA and never tried to mess with it again. If you must tinker with your phone on 4.4.4 I advise you wait for the Sprint 4.4.4 sbf to drop first. Just my piece of advice.
[Moto X General] joel_sinbad:
I downgraded my Droid Maxx before flashing everything except the motoboot.img, from 4.4.2 to 4.4
[Moto X General] samwathegreat:
First, this is totally inaccurate and wrong. Yes, motoboot.img is the bootloader, but the bootloader didn't even change from 4.4.2 > 4.4.4. Gpt.bin (the partition table) is what changed and it also can not be downgraded.

Second, this is extremely risky.

Third, you can't JUST flash system.img - you have to at least also flash boot.img (the KERNEL).

And Fourth, what applies to the Droid MAXX doesn't necessarily apply to the Moto X. The Droid Maxx is known to be downgradable between certain versions of Android due to differences. Search "Moto X Bricked" and you'll see that most who downgraded their Moto X weren't so lucky...

Guys - stop advising people to downgrade. I don't want this in my thread.

Can you do it? Sure. But it is extremely risky.

Some people brick immediately, some brick after taking the NEXT OTA, and some brick after taking the next 2 OTAs. There is no telling if or when it will happen.

If you do it, you do it completely at your own risk. I'm not responsible if/when you brick.

Don't advise others to do it unless you plan to assist them personally if they brick, OR buy them a new device if it ends up hardbricked.

You want to advise people to downgrade - do it through Private Messaging - not in *MY* thread. Then you can be wholly responsible if something goes wrong.
[Moto X General] jaaa1976:
4.4.4 back to 4.4.2

This work for me :good:

I was success downgrade from 4.4.4 to 4.4.2 and was able read code with SPC ...of course do it at your risk:cowboy:

UPDATE ....after downgrade to 4.2.2. and take OTA update ..phone is brick now ...after downgrade to 4.2.2. ..only update phone to 4.4.4. with rsd lite or fastboot!
[Moto X General] Co0l Guy 33:
Questions about RW Unlock

Hello!

First thank you [MENTION=2509024]samwathegreat[/MENTION] for the toutorial!

Before I was going to do this, I had a few questions regarding my Republic Wireless XT1049.

1. (I am a noob at this kind of stuff) How can I unlock the bootloader for the XT1049? (It says I need to flash Sprint ROM, and in order to, I need to unlock BL)

2. Do you need root access in order to unlock BL?

3. How can I flash the Sprint ROM after I do ^^^

4. I am planning to switch over to AT&T. Some of the previous posts stated HSPA+ WILL work. Is that Correct?

Thanks :)
[Moto X General] samwathegreat:
1&2: This was already answered in my OP. There is ONLY ONE way to unlock the BL. It isn't free. See here: http://xdaforums.com/moto-x/general/china-middleman-t2751177

3: See the thread titled "Return to 100% Stock" in the General sub-forum

4. Absolutely.
[Moto X General] Co0l Guy 33:
Sooooo Confusing and so many posts :eek:!

I am looking at one of your OP's and I found these unlock tokens for RW:

KXVYDH5SYWYQJ2EB4643 (Republic Wireless XT1049)

AXZ3JJ3QE2GBZEWEG2IU (Republic Wireless XT1049)

Would these work? And how would I use them?
[Moto X General] samwathegreat:
NO! You ***HAVE*** to pay the middleman. Period.
[Moto X General] Co0l Guy 33:
Oh.

I don't have the money, so I suppose I can't SIM unlock :(

---------- Post added at 04:19 PM ---------- Previous post was at 04:07 PM ----------

If I REALLLY wanted to stick with AT&T, and NEVER wanted to go back to CDMA, can't I just unlock with the RW ROM?
[Moto X General] samwathegreat:
No. The Republic Wireless hybrid wifi/cell calling system will prevent you from being able to use GSM/AT&T at all. It won't work.....

Again, that too was addressed in my first 2 posts.

The fact is: either you have to pay the middleman, or you can't do it. End of story.
[Moto X General] Co0l Guy 33:
Thanks, I guess?

I'll just wait until someone will figure it out without needing to pay the middleman.
[Moto X General] samwathegreat:
It's not my fault RW locked their bootloaders. I'm only giving you the facts and options.

I wish I had access to the database the middleman has -- at $45 a pop, he has made quite the small fortune by now.

Yes, a BL unlock exploit was found, but it has not been released. No DEVs have even said that they are interested in working on it or releasing a tool to do it. It might happen, and it might never happen.....none of us know.

I don't know your age or situation, but my advice is that if you want to be able to do this, mow some lawns, or do some small jobs to earn the $45. If you are planning on using AT&T, $45 is what? Like 1 MAYBE 2 months of service?

I do find it slightly irritating that so many people don't even hesitate to send the middleman $45, but they won't donate a dime for the SIM-UNLOCK guide that I worked so long and hard on (countless hours)....but oh well. That's how it goes. You put tons of time and effort in to cracking something and people just take and use your work, most without even saying "thanks", or hitting the "thanks" buttons. Many of them ask questions and need to be guided even though all the steps and info are already available. They still don't donate - not even 2/3 of those who *promised* to - *before* I cracked the sim-lock.

Don't get me wrong, I have no problems helping people that want to help themselves....but anyway.

^That's probably why the bootloader unlock tool won't be released. Someone would have to work probably hundreds if not thousands of hours on it, and few if any would donate or fulfill their bounty pledges. I really do hope it is released, but I'm doubtful at this point.

It is what it is.
[Moto X General] Co0l Guy 33:
I understand. Thanks For Replying

I wouldn't mind donating. I just need to find out how to get it unlocked and its all good. The only problem is, I don't think my dad is OK paying a Chinese man he doesn't even know overseas (No Racist). So therefore, I can't do anything.

Thanks for the clarification though!
[Moto X General] samwathegreat:
Here is one last option for you:

Assuming your RW Moto X is still in good/very good shape, SELL IT! You should get *slightly* more for it than it will cost you to buy an actual SPRINT XT1056. Then you can just follow the guide and use it on AT&T. Someone might even be willing to trade you straight up.

The average going price for a *very good* RW XT1049 is just under $200.

The average price of a used Sprint XT1056 is around $170.

You could post on craigslist or something with an offer to trade. You **MIGHT** even find someone willing to trade an AT&T Moto X, or T-Mobile Moto X for it. Both of those will also work fine on AT&T.

Good Luck :good:
[Moto X General] jaaa1976:
BOUNTY

Hallo..here is a BOUNTY for Samsung Galaxy Mega 6.3 SPH-L600 16GB (Sprint)..another opportunity for you and I can again help with files if will need...because i have this phone and use only as tablet at the moment.:p

http://xdaforums.com/galaxy-mega/help/bounty-unlocking-sprint-mega-l600-t2857535
[Moto X General] ecs87:
100% agreed. Especially considering some people donated WITHOUT even pledging a bounty.

Some of the folks over in the Mega section ran me out of the thread for helping them...FOR FREE. Using MY time and MY knowledge. That's the last visit I made to that thread. No wonder why we don't really see hackers around anymore.
[Moto X General] samwathegreat:
Thanks ecs87. I sincerely appreciate your donation (as I do EVERYONE that has made one) - but especially considering that you don't even own an XT1056, AFAIK. :good:

Well.......since the "MEGA" started out on 4.2.2, I bet this is completely possible.

ecs87 is the samsung expert here (more so than myself anyways). The bounty is pretty small.....but I think he already knows how to pull it off assuming the *special modem* is flashable to that device. We are well aware of the NVITEM that controls the lock - the only question is whether or not there is a baseband available that allows writing to it.... Want to take a stab at it, [MENTION=4959296]ecs87[/MENTION] ?
[Moto X General] ecs87:
The most difficult part would be funding someone still on MI6. There wasn't a firmware tar file for that, so I doubt a modem file is floating around. May be able to strip one out through adb though...

And I wish I could've donated more. I know how long analyzing logs and nv dumps take and how frustrating it can be. #lifeofahacker
[Moto X General] ezeuba:
A quick question please. Has anyone confirmed this is working on the US Cellular variant?

Thanks.
[Moto X General] samwathegreat:
The guy on this page claims that it does not:

http://xdaforums.com/moto-x/general/guide-success-sim-unlock-sprint-xt1056-t2825155/page28
[Moto X General] ac2014:
So in order to unlock the phone u have to flash all the 3 unlock.txt files, the ruin.txt file is to keep it on GSM even after reboot!?

Also is it not possible to put the the phone in cdma after flashing the ruin.txt file till u flash revert?
[Moto X General] samwathegreat:
If you only want to use it internationally just flash the nv_unlock - this mimics the official unlock. If you want domestic use, also flash the domestic unlock file.

If you want to prevent it from switching back to CDMA after each reboot, flash the unlock2, then the ruim only.

Once in ruim only, I don't believe you can use CDMA without reverting. Not 100% sure though.
[Moto X General] jaaa1976:
On my another phone I cant flash nv-ruim-only ...I put 6 digit code from SPCUtility ..any suggestions?

just need to use phone in UK.

Writing NV-items from a file:

Unsuccessfully written NV-items:

00855 (0x0357) - SPC (6 digits) is required

Done.
[Moto X General] samwathegreat:
You either didn't check both boxes at the top, or you didn't hit read at the top. Follow the instructions exactly.

The fact that it says spc is required tells me without a doubt that you missed one of those two things. Look at the pictures.
[Moto X General] jaaa1976:
YES ..its ok now ..Im forget read ..thx
[Moto X General] Vivjen:
Did exactly the same as written, but on last step (writing nv-ruim-only) same error happen "Unsuccessfully written NV-items: 00855 (0x0357)"

Update: Without "ruim-only" flash phone connecting to GSM network upon reboot
[Moto X General] Datlore001:
Have not done this process yet but my Sprint Moto X wants to update to 4.4.4. Assuming I let it take the update, this process should be unaffected, correct?
[Moto X General] samwathegreat:
You should AT LEAST download the spcutility, and read your msl. Once you have it, write it down somewhere. You will need it for the procedure.

The spcutility doesn't work on 4.4.4.

Once you have it, the procedure can be performed on any android version.

*get your spc/msl BEFORE you update*
[Moto X General] Datlore001:
Excellent. Thanks.
[Moto X General] Agvxtin:
210

its works on moto xt 1058 made in argentina . Sorry for my bad english . Thanks
[Moto X General] samwathegreat:
Your English was *almost* perfect.

It works on moto xt1058 made in Argentina. Sorry for my bad English. Thanks

Thanks for letting us know! We had no idea it work work on any XT1058.
[Moto X General] jaaa1976:
my APNs setting for 3 uk network ..still disappear ..

Im use command ... fastboot oem config carrier H3G-ROI H3G__003

On another moto x and same room ROM] Epsilon Project < V1.0 | 09/03 is network working good ..what can cause this?

can be problem ..Im downgraded room to 4.4.2 ? for read SPC?
[Moto X General] samwathegreat:
I warned everyone not to downgrade... That could be it, not sure. I only support stock ROM though.

Hopefully someone else has some advice.

Another member had success with fastboot oem config carrier retail
[Moto X General] cthefox:
SPC app not work on my Moto X XT1056-- fatal error

Trying to unlock my Motorola Sprint XT1056, but after downloading the required info and program and app, the SPC app will not work--- gives fatal error and won't let me see the SPC
[Moto X General] samwathegreat:
Yeah, we know. If you had read the last couple pages, you would understand.

It is because you took the update to 4.4.4! You can't read the SPC once on 4.4.4.

Just write everything without the SPC. All the NVITEMS will write EXCEPT for "nv-ruim-only" - you can't write that without SPC.

It will still work -- it just MIGHT switch back to CDMA after every reboot. Maybe.
[Moto X General] jaaa1976:
Im flashed stock VZW_XT1060_4.4.4-KXA21.12-L1.26_CFC_1FF and all is work again :victory:
[Moto X General] ecs87:
I wonder if you guys can easily get the SPC from an adb logcat? I had to do that recently on a LG G3 that asked for a SPC code before enabling diag.
[Moto X General] samwathegreat:
Great option.. If you write up a guide, I'll quote it in the instructions as alternative for those on 4.4.4.
[Moto X General] ecs87:
Enable USB debugging on the phone. Plug it up to the computer and make sure the correct drivers load. With the adb toolkit installed, go to that directory in a command prompt and type "adb logcat > spc.txt" but don't press enter yet. On your phone dial ##DATA# and tap edit. You may need to select something like Data profile after you dial ##DATA# and then it'll ask for view or edit (tap edit). It'll ask for a SPC. Enter 000000, but before entering the last zero (or before tapping done/OK, I don't know exactly how the menu is on the Motorola devices) press ENTER on the computer to start the logcat. Now enter the last 0 or tap done/OK. When it says you have the wrong SPC, stop the logcat by pressing CTRL+C.

This is where you're going to spend the most time. On the LG G3, I saw something like D/QcrilMsgTunnelSocket( 1646): [1192] < OEM_HOOK_RAW [06000000373730393137]. This looked familiar from the LG G2 D/QcrilMsgTunnelSocket( 1351): ByteArray from parcel = 06000000353433373034. Forget the 06000000. That's just a header. Pay attention to 373730393137. There's a pattern of 3's. Take those 3's out (you can see which ones to take out, if you have something like 333333333333 you're obviously not going to take out all the 3's. You're going to take out every other 3 starting at the first one.) and there's a 6 digit code...the SPC. I'm not going to even say that the motorola is going to be as complex as this (or as easy as this) but this is the kind of searching that you're going to have to do.
[Moto X General] samwathegreat:
I will test this method tonight unless someone beats me to it. Once confirmed, you will be quoted and credited.

Thanks!
[Moto X General] Ephemera:
Once tried I got access denied. On stock. We need root access correct?
[Moto X General] samwathegreat:
Access denied on what? Entering 000000 on the device is the WRONG spc....so you will get access denied on the phone.

You are supposed to read through the logcat txt file to try to find the CORRECT spc....

I'm not understanding what you are doing. You do not need to be rooted to logcat...

Unfortunately I never had the chance to attempt this....but I DID successfully run an ADB logcat - with no root.

Give it another shot. Some further explaination of what you did and what "denied access" would be good too. I'm assuming the phone simply denied access because you entered the wrong SPC - which is completely to be expected..
[Moto X General] Ephemera:
Access denied on adb. Restarted it as admin and it worked this seems to be the only thing that COULD lead to the SPC. http://gyazo.com/74aef2edc258ba8fddc8f2ee002b5b71
[Moto X General] samwathegreat:
Yeah, I don't think that's going to help. A google search shows users have had similar errors. On Moto devices, it seems quite impossible to read the SPC once on 4.4.4 -- not even CDMA Workshop appears to be able to read it.

I suggest following my instructions regarding SKIPPING the writing of nv_ruim_only. All the other NVITEMS will flash without the SPC.

[MENTION=4959296]ecs87[/MENTION]
[Moto X General] Ephemera:
Will that work if I want to flash to another CDMA carrier?
[Moto X General] samwathegreat:
Nope, but that has nothing to do with this thread. I suggest taking your discussion to the CDMA flashing thread ("Guide: flash sprint moto x to page plus) and asking them. This thread is about GSM unlock and only supported as such.

Good Luck
[Moto X General] abhishekpujar:
Will this work on US Cellular Moto X? I am planning to buy one and will buy ONLY if GSM works on it. Someone, please?