yashsingh1/xdaforums huggingface dataset:
[Moto X General] :
Thank you for making this happen! You're making a teenager pretty damn happy! I'll be able to save money and buy myself a Sprint Moto X and use it here in Houston on HSPA+! (Thank God that T-Mobile had already re-farmed my area.) :victory: I'll be sure to donate when I complete my purchase of my Moto X on Swappa.
[Moto X General] samwathegreat:
Please learn to use SEARCH. Its not hard, and takes FAR less time than waiting on someone to reply to you....

http://xdaforums.com/moto-x/general...int-xt1056-t2825155/post55223034#post55223034

Fantastic! Thanks, and I look forward to it. Try to get one still on 4.4.2 or lower (so you can read the SPC). This way you can complete the entire procedure. (If you are confused by this, read the last 3-4 pages of this thread...) :good:
[Moto X General] abhishekpujar:
I did read through the entire thread, but no one actually confirmed it and hence my question. Sorry
[Moto X General] samwathegreat:
Not a huge deal....but....I just linked you to the post *in this thread* where a guy confirmed it did not work on his US Cellular Moto X....

Better off to find a Sprint Moto X. The resale value of the two devices (US Cellular vs Sprint) are very close.

If there is some excellent deal locally for a US Cellular variant.....buy it! Sell it on Swappa or eBay, and use that money to buy a Sprint variant.
[Moto X General] abhishekpujar:
Alright. Thank you go your quick response.
[Moto X General] conquesoextra:
This is truly fantastic... I don't need to unlock my moto but your story impressed me.

Cheers bro!
[Moto X General] makkonen:
OK... A quick check of "adb logcat -b radio" doesn't show anything super obvious. I was hopeful at first when I saw this:

V/RILJ ( 1176): [UNSL]< UNSOL_OEM_HOOK_RAW 514f454d484f4f4bf10308000100000002
D/RILJ ( 1176): Oem ID in RIL_UNSOL_OEM_HOOK_RAW is QOEMHOOK
D/RILJ ( 1176): OEM ID check Passed
D/RILJ ( 1176): Response ID in RIL_UNSOL_OEM_HOOK_RAW is 525297

But whatever that code is, it's not the spc.

Later on in the logcat file, I see a number of results of the following form.

D/RILJ ( 1176): [3687]< OEM_HOOK_RAW [B@4214f2b0
D/RILJ ( 1176): [3688]> OEM_HOOK_RAW[1600000211000000000000003030303030300900000001000000000000000000000000]
E/use-Rlog/RLOG-RIL-MOTEXT( 236): mothook_oem: header type 0, requestCode 0x2000016
W/use-Rlog/RLOG-RILQ( 236): (0/236):RIL[0][main] onRequest: cmd 59, t_id 40 exec not performed,int_adt 0
D/RILJ ( 1176): [3688]< OEM_HOOK_RAW [B@420ec570
D/RILJ ( 1176): [3689]> OEM_HOOK_RAW[1600000211000000000000003030303030300900000001000000000000000000000000]

The first 5 characters of the entries with [B remain the same, but the rest change. Maybe the correct response can be teased out of it, but maybe it's nothing. I'll take another look at it tomorrow, but it's not a slam dunk, anyway.
[Moto X General] ecs87:
If someone wants to send me a regular log and then a radio log I don't mind taking a look through them for the SPC. But as previously mentioned, getting the SPC isn't completely necessary.
[Moto X General] ac2014:
Isn't your spc 000000!?

I'm just speculating that's what's between the 3's
[Moto X General] ecs87:
That's probably the INPUT of his. 303030303030 in hex is 000000. What we need is the OUTPUT of RIL or for the main log to slip up and reveal it.

---------- Post added at 11:13 AM ---------- Previous post was at 11:13 AM ----------
[Moto X General] andresrivas:
Hi! I'm planing to do it on a 4.4.2 xt1058 from Argentina, the 3g/utms loss is only on US or it affects international devices as well?

Thanks!

Enviado desde mi Moto X usando Tapatalk 2
[Moto X General] samwathegreat:
No idea what you are taking about. What 3g loss?!

This is intended for sprint devices. It might work on your 1058 but we don't know. Only one person with a 1058 confirmed success.
[Moto X General] Nicene Nerd:
[MENTION=2509024]samwathegreat[/MENTION]: From my testing, you can get the SPC if you've upgraded to 4.4.4 just by making a Nandroid backup and flashing the stock 4.4.2 ROM ZIP (instead of the full firmware package).
[Moto X General] samwathegreat:
Excellent, thanks for the info.

I just hope people understand well enough the difference between this and using rsd lite.

Hate to see an inexperienced user brick because they don't understand and attempt a downgrade...
[Moto X General] Ephemera:
So if I flash everything except NV RUIM this will still work. What's the benefit of NV RUIM? I'd like to do this without my SPC.
[Moto X General] samwathegreat:
I suggest either reading the last few pages of this thread, or using search.
[Moto X General] andresrivas:
Nevermind, was talking about this part of the second post:

But it refers to the radio of sprint's X on other carriers

Enviado desde mi Moto X usando Tapatalk 2
[Moto X General] nexuspur:
[MENTION=2509024]samwathegreat[/MENTION] i found this http://xdaforums.com/crossdevice-dev/sony/thread-progress-please-leave-im-updating-t2871269

This is too good to be true.
[Moto X General] ejlmd:
If this seems likely to work on our device I would love to unlock the AWS bands for T-Mobile USA, even if the T-Mobile LTE bands end up not being available. I get robust HSPA+ in refarmed areas near where I live but elsewhere 2G/EDGE, even on some major roads and highways.

This would be an awesome addition to your international and domestic SIM unlock!
[Moto X General] rimskymix:
Excuse me sir, i dont know much things about unlocking, can i unlock the note 3 from sprint with this process?
[Moto X General] samwathegreat:
Absolutely not. See here for progress regarding unlocking samsung devices: http://xdaforums.com/showthread.php?t=2743024&page=62

Would you mind editing your post and removing the extremely long quote of my entire first post? Thanks.
[Moto X General] rimskymix:
thank you
[Moto X General] blackroseimmortal09:
I recently bought a Sprint Moto X Sim unlocked with a T-Mobile ROM and APN to work on T-Mobile. I'm assuming he used this method good job BTW. It has a unlocked boot loader but doesn't seem to be rooted. I have grown tired of T-Mobile service and want to use this phone on Sprint. So my question to you is, how do I get the stock Sprint ROM back on the phone so I can use this phone with Sprint? Thanks in advance!
[Moto X General] nukeman239:
The unlock worked perfect for me. Is the unlock permanent? Will it stick even after the imminent Android L update?
[Moto X General] samwathegreat:
Use RSD Lite to flash the entire stock sprint ROM. You risk bricking if you attempt to flash the 4.4.2 sbf instead of waiting for the 4.4.4 sbf.

You really should wait for it to be released. Since the t-mobile rom is on 4.4.3 you will be downgrading if you flash 4.4.2 (and a brick is likely to happen). Waiting for the 4.4.4 sbf to be leaked and flashing the entire thing is the only *safe* way to return now that you are running a 4.4.3 ROM.

The only alternative is to flash twrp, and then flash the sprint twrp-flashable ROM, then use fastboot to erase modemst1 and modemst2 partitions. This is also risky because you will have a mismatched partition table **AND THE WRONG MODEM** (which could prevent it from working on Sprint at all....) so taking OTAs in the future could brick your device. That will revert the sim-lock and put you back on Sprint ***assuming*** nothing else has been modified. If the previous owner also flashed to page plus, OR changed the SPC code, the phone will never work on Sprint again.

Good Luck.
[Moto X General] samwathegreat:
Since it is controlled by an NVITEM, it *should* persist, but I have no way of knowing for sure. Have to wait and see.
[Moto X General] cellzealot:
Any update taken via OTA or XML that includes a new radio image will reset the NV to default configuration, requiring redoing the edit after updating.
[Moto X General] blackroseimmortal09:
Wow sounds complicated I just want it back to the way it was when it came out of the box and able to get OTAs, that being said, would you recommend the first one?
[Moto X General] blackroseimmortal09:
Yep doesn't look like their is a Sprint 4.4.4 or 4.4.3 sbf yet. Since I can't downgrade to a lower version sprint rom, could i downgrade to a lower version TMO rom then install a 4.4.2 sprint sbf, update to 4.4.4 through OTA, then update PRL to get Sprint modem?
[Moto X General] :
No, that is even more hazardous. Downgrading in any form is dangerous, and flashing another carrier firmware doesn't change that.
[Moto X General] blackroseimmortal09:
What do you suggest I do? I have a Sprint Moto X 4.4.3 on T-mobile Sim-Unlocked and I want it back on Sprint
[Moto X General] :
You need to wait for files that are the same or higher version to flash. Not much else you can do I'm afraid.
[Moto X General] ezeuba:
OK. Checking on that now... will post in a little while...

EDIT: NV-ITEM file for RUIM Only uploaded. I hope this works...
[Moto X General] samwathegreat:
Thanks!!! Posts updated. Also incuded a "revert" file to revert back to default RUIM config (just in case for some reason, someone wants to switch back to default RUIM config to use CDMA).

Really appreciate it. Hope you're enjoying your unlocked XT1056 :)

I'm exhausted....it's 5:34 A.M here in Indiana. I'm going to bed.....

Goodnight everyone :silly:
[Moto X General] Vekhez:
Everyone also press the 'Tip Us?' button that resides at the top of the thread, so that [MENTION=2509024]samwathegreat[/MENTION] 's work is promoted to the front page for all too see.
[Moto X General] :
Awesome work!! Many have waited long for this!! :)

(Except us Canadians. Lol. Our carriers are crooks too....but they let us do what we want with our phones at least.). ;)
[Moto X General] samwathegreat:
THIS^^^^

I -STILL- need someone in the U.S. to test my SIM-Crack and advise: does it unlock for domestic (United States) GSM carriers too? I NEED this info to update the OP...
[Moto X General] samwathegreat:
You're wecome!~!~!

[MENTION=5298002]yefonme[/MENTION] : I bet the guy who sold you that phone regrets taking your money / wishes he never sold it to you :p

LOL! It's -GAME OVER- for him ;)
[Moto X General] ejlmd:
I am going to try the SIM Unlock for T-Mobile USA, but first I have to flash my bootloader unlocked Republic Wireless XT1049 (4.4.2 ZVC) onto something else. The simplest would be a rooted Sprint 4.4.2 (or later) ROM, since the devices are supposed to be identical, but I'm having trouble finding a Sprint Kit Kat ROM that's already rooted. Otherwise I may try the Carbon ROM port, which is generic.
[Moto X General] samwathegreat:
You don't need a rooted ROM.

Just flash the ENTIRE 4.4.2 XT1056 SBF as per the "Return to Stock" thread (in general sub-forum). -- Everything you need is linked in that thread, including links to the SBF files themselves.

Then, flash TWRP http://techerrata.com/browse/twrp2/ghost using fastboot:

fastboot flash recovery twrpfilename.img

then:

fastboot reboot-bootloader

and VOL DOWN to RECOVERY, and VOL UP to select/enter it.

Wait for TWRP to load-up.

When you go to exit, it will say something to the effect of "Your device is not currently rooted. Would you like to flash SuperSU-Installer"

Say YES, then once rebooted, open "SuperSU Installer" and choose the "Play Store" option.

DONE.

Please do this and advise me ASAP if it works for U.S. GSM Carriers. :good:
[Moto X General] ejlmd:
Before you posted this reply, I had already flashed the generic Carbon ROM. When I go into fastboot, and scroll to BP tools, then select using volume up, the unlocked bootloader splash screen immediately comes up and the phone reboots normally. Not sure why I am not getting into diag mode.
[Moto X General] samwathegreat:
This is expected. The phone boots normally, BUT with the DIAG COM-port enabled. Look under device manager and you should see something like "Motorola QC Diag Port" and a COM port #, assuming you have the Moto Drivers installed.

...then you can just follow the rest of the guide...

Moto DIAG Drivers here: https://motorola-global-portal.custhelp.com/app/answers/detail/a_id/88481
[Moto X General] ezeuba:
Just thinking out loud... Could this also work for the Sprint Galaxy S5, since the SIM lock works along the same pattern as this? Perhaps someone can take a cue from this and get it done for the Sprint S5... Just a thought...:cool:
[Moto X General] samwathegreat:
If there is a BOUNTY, I may be interested in taking a look ;)
[Moto X General] ezeuba:
SIM unlock 'bounty hunter'... :D:laugh:
[Moto X General] samwathegreat:
UPDATE:

POST # 3 has been updated with DETAILED instructions on how to install DIAG DRIVERS and how to manually FORCE driver installation, if necessary.

(With Pictures!!!!) :p
[Moto X General] Gerardome:
Working!!! Outside usa congratulations

i just unlocked my moto x from sprint, i'm thankfull with you!!! You just did it! And I want to know if can upgrade to latest android and baseband via ota and keeping my phone unlocked
[Moto X General] samwathegreat:
Updated POST # 2 with MUCH more concise and detailed instructions, and added PICTURES!

It turns out you must first write the correct SPC code in order to change to RUIM-ONLY.

Also, on my XT1049, even after changing to "RUIM-Only", the phone STILL reverts back to "NV-ONLY" after every reboot. Are you having this issue? I'm thinking we might need to write the "WhiteRabbit" NVITEM 8035 to disable this from reverting....I realize that you, [MENTION=2026715]ezeuba[/MENTION] , have already done this when you were flashing CDMA, so you may not have experienced this issue....

Are any other users having issues with getting reverted back to NV-ONLY after reboot? It could just have something to do with me still being on the Republic Wireless ROM (I am not willing to flash the XT1056 ROM to my XT1049, because I have service through RW), but if it is happening to other users as well, I will update POST # 2 to include flashing the NVITEM 8035 to disable MIP-Revert.

Need someone to advise.
[Moto X General] ecs87:
Sorry for quoting so much, but the majority of my response will be directed at what I quoted...meaning I have quite a few things to address. First off does this phone have any kind of m9kefs partitions on it? I thought Sprint devices all had this, but it seems some have moved to the more conventional method of storing the EFS in modemst1, 2 and FSG....which will get wiped if a RTN or SCRTN is done; HOWEVER will NOT get wiped in an Odin flash (at least on Sprint devices) or a factory hard reset. A international unlock on Samsung devices gets wiped out by doing a RTN and SCRTN. Makes sense IF the international unlock is contained in the EFS, which according to your post it undoubtedly is.

I also followed the rabbit hole and discovered that the 3MB EFS partitions were HEAVILY encrypted. Which is apparently why everyone (or at least the big majority of us) doesn't directly mess with the EFS in an hex editor. So I carried onto vbindiff'ing NV item backups. HOWEVER, I also noticed that some items were inactive, some parameters were bad, and some were denying access. In this case...how did you "manually compare them by hand" if you couldn't even access them? Or...did you just use another program to read the ones that you were denied access to?

By the way, vbindiff is an amazing program for finding stuff like this. It compares two files side by side in ASCII and hex. It even has a feature where you can search through where the two files are different, and bypass things that are the same. You have to run it in a command prompt though I think.

Kudos on the work. Hopefully this will help crack a way into the S5 and Note 3 international unlock.
[Moto X General] ensedese:
Not service after followed all the steeps

Hi, I'm sorry for my bad english, I'm from Lima - Peru, I appreciate very much all your efforts for make possible the Sim-Crack. It was a great work :)

Well, here I is my question: I purchased few weeks ago a Sprint XT1056 with bad esn from ebay.

First at all I unlocked my bootloader, then change the firmware to the Sprint Stock firmware, then I followed all the steps of the guide but at the end I don't have a Service on my phone, The good part is there's no appears the error sim message again :) but I don't have service on it, The phone is now configure in GSM/UTMS network mode and is allowed GSM data.

I need you help, I don't know if I missed something like use the openrecovery-twrp-2.7.1.1-ghost or something else. Please.

Thanks for your time.:good:
[Moto X General] samwathegreat:
Hmm...well first, using RSD Lite to flash the stock SBF DOES issue the following commands as per the XML files:

fastboot erase modemst1

fastboot erase modemst2

(and these commands are also listed in the Return to Stock - manual method). You COULD edit the XML file and remove those commands, and skip over them of you manually flash to stock though, preventing all NVITEMS from being defaulted back to factory status.

As you read in my post, yes, the EFS -IS- heavily encrypted, which posed a road-block, and instead (once I determined that the commands I listed above reset NVITEMS to defaults), I focused on the NVDUMPS instead. (Don't know anything about m9kefs)

You are correct - many NVITEMS are "inactive" on some phones, but not others. Also, some are "restricted". I ignored these values, looking instead at the values that COULD be read. I realized that it was a long-shot, assuming early-on that the KEY was probably held in one of these "restricted" NVITEMS, but (as we all know now), that turned out to NOT be the case.

My issuse with comparisons was that I couldn't find any comparison-tool that would IGNORE that (for instance) DUMP#1 had a several inactive items, that WERE active on DUMP#2, and the same with restricted values. Strangely, even with two LOCKED XT1056s, there were MANY differences - one phone might have several "restricted" items, while on the 2nd, those items were NOT restricted.

It was a long grueling process....

Anyways, I hope this answers your questions - I really can't advise any further. Really, I ended up getting QUITE LUCKY! But I'd like to (for the sake of pride) contribute the success to all of my hard work ;)

Thanks for the suggestions on the vbindiff tool -- IIRC, I did come across that, but for whatever reason didn't end up using it. (Maybe I tried and couldn't get it to compare due to the differences in file structure between the multiple dumps -- I really don't remember to be honest).

EDIT: and keep in mind that much of your information seems to be specific to Samsung devices, so consider that differences likely exist between Samsung and Motorola devices.

-samwathegreat
[Moto X General] samwathegreat:
Don't know -- all I can suggest is re-do all the steps listed (I updated Post # 2 with better, easier steps and pictures), and try again. Also, check here: http://en.wikipedia.org/wiki/Moto_X and confirm that the XT1056 supports the band(s) that your carrier uses. Some carriers may be on WCDMA, and on a UMTS band that the XT1056 doesn't support? Probably not, but maybe...

Since it has worked for everyone so-far, I would assume something went wrong in your particular case.

Good Luck
[Moto X General] ezeuba:
I took the 4.4.4 OTA and my SIM unlock never reverted. I did this twice... How come you may ask. I took the OTA first, then wanted to tinker with the mms.apk file, failed, tried to revert back to stock mms.apk, forgot I deleted the original before tinkering with it, also forgot I was already on 4.4.4, fastbooted the 4.4.2 system.img, got a shiny good soft-brick. Panicked, searched high and low for Sprint 4.4.4 sbf, couldn't find one, had to do with Verizon 4.4.4 sbf, used this to at least get the phone to boot. Remembered the last 4.4.2 backup I had on my laptop, flashed Philz recovery, restored 4.4.2 backup, took 4.4.4 OTA again. Fully working phone on 4.4.4, and never needed to redo SIM unlock.
[Moto X General] cellzealot:
It is possible that it will not revert this specific item during an update but it is a much better assumption that it will.

Virtually all other edits of this type in the same range of NV where hidden Motorola and Qualcomm parameters are stored are reset whenever the radio image is flashed even without an update.

I shouldn't speak definitively because I don't have a Sprint X, but all past experience suggests that it would be overwritten with a default NV configuration.

I was responding to Samwathegreat's assertion that because it is an NV ITEM it should persist.

This is a false assumption and I wanted to clarify that point.

I should have answered more precisely, sorry, thanks for the opportunity to restate my point! ;)
[Moto X General] blackroseimmortal09:
ezeuba- would this method work for my case sprint moto x Sim unlocked unlocked bootloader with 4.4.2 T-Mobile ROM to get sprint ROM back?
[Moto X General] samwathegreat:
If you are on 4.4.2 T-Mobile ROM, just flash the 4.4.2 sprint sbf. Just verify and make sure you aren't on 4.4.3.

You will need to do Sim unlock procedure afterwards, BEFORE you take the ota to 4.4.4.
[Moto X General] blackroseimmortal09:
Do I install Sprint 4.4.2 dbf through RSD Lite? Why would I need to Sim unlock again if I'm going to use it on sprint?
[Moto X General] samwathegreat:
Yes, and no reason to do it if you plan to actually use sprint. I thought you just wanted on the sprint ROM. Just flash in rsd lite if and only if you verified that you are not on 4.4.3. Do not downgrade.

Otherwise all should be well after flashing sprint sbf.
[Moto X General] blackroseimmortal09:
Thats the thing though I am on 4.4.3

---------- Post added at 04:07 AM ---------- Previous post was at 04:04 AM ----------

Is there a sprint SBF for 4.4.3? I just need to be able to use sprint.
[Moto X General] samwathegreat:
In my first reply to you I already advised that you must not be on 4.4.3.

The only SAFE way to do it is to wait until the 4.4.4 sprint sbf is leaked. You might consider flashing the twrp flashable sprint 4.4.4 ROM, but then you will have a mismatched bootloader and partition table.

If you still don't understand, I suggest making a new thread. We are way of topic here.
[Moto X General] blackroseimmortal09:
Sorry don't mean to get off topic. Ill just wait to switch to Sprint and wait for Sprint SBF 4.4.3. Don't want to mess anything up.
[Moto X General] samwathegreat:
There isnt and won't be a sprint 4.4.3 sbf. Only 4.4.4. It is always safe to go the same or higher. It should be leaked before too long.
[Moto X General] ac2014:
I would suggest checking the ESN if it's clean
[Moto X General] blackroseimmortal09:
Its clean
[Moto X General] cedricdhaenens:
NO 4G for international carriers?

I was wondering if there really is no way I can use my 4G network in Belgium, because the 3G here is so slow... :crying: :(

Anyone found a solution to this yet?

Also, I keep getting the message to activate my device everytime i boot it...

Thanks in advance!
[Moto X General] ejlmd:
Enable additional WCDMA band 1700 NVITEM 1877

I followed the instructions in the OP to enable a diagnostic port, then OP in the following thread to read and modify NV item 1877:

http://xdaforums.com/crossdevice-dev/sony/thread-progress-please-leave-im-updating-t2871269

Original bands:

[Bit_07] GSM DCS 1800 band

[Bit_08] GSM Extended GSM (E-GSM) band

[Bit_19] GSM 850 band

[Bit_21] GSM PCS 1900 band

[Bit_22] WCDMA Band I - EUROPE JAPAN & CHINA IMT 2100 band

[Bit_23] WCDMA Band II - US PCS 1900 band

[Bit_26] WCDMA Band V - US 850 band

When I ONLY enabled additional [Bit_25] WCDMA Band IV - US 1700 band, the updated NV item did successfully paste, write and save into field 1877. This persists on reboot, with HSPA/HSPA+ reception.

I am now in a T-Mobile refarmed area so was already getting HSPA (I believe on band 1900). I will test in a non-refarmed area to see if I get EDGE only or now HSPA on the newly enabled band 1700.
[Moto X General] andresrivas:
Ok, went ahead and tried on XT1058 from Argentina. Phone seems to be unlocked, but atm I don't have a sim to try. Will try tomorrow
[Moto X General] Co0l Guy 33:
[MENTION=2509024]samwathegreat[/MENTION] Will I recieve OTA's from doing this? I am planning to unlock the BL, flash another ROM BESIDES Republic Wireless (Probably AT&T), and then performing the SIM Unlock (Or do I have to perform the unlock on Sprint ROM then flash AT&T?)