yashsingh1/xdaforums huggingface dataset:
[Moto G Q&A, Help & Troubleshooting] RestlessScreams:
Sent mine completely locked to a repair center. They said that they mustn't do it so well, no help from the official side of things..
[Moto G Q&A, Help & Troubleshooting] skyguy126:
[MENTION=5383643]bludotos[/MENTION] is already working on it. The radio is the key to solving this problem.
[Moto G Q&A, Help & Troubleshooting] bludotos:
I hate to keep you guys waiting, but I just haven't had time to decompile yet. It probably wont happen until Feb. (Got classes, work, and I'm moving)
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Dude no rush, get the important things in life done first. IMEI=0 comes last in the list mate.
[Moto G Q&A, Help & Troubleshooting] skyguy126:
Any updates from anyone?
[Moto G Q&A, Help & Troubleshooting] ol_st:
Guys, would you be so kind to explain, what should I replace in my phone in order to make it workable after erase all? I mean, is it possible to find, e.g. on ebay special part(s) of the phone to recover it? Sorry for a stupid question :)))
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
[MENTION=5973547]ol_st[/MENTION], The reason why either a new phone or a new motherboard for you phone is required is due to the fact after an Erase all the required partitions which are encrypted BTW are now missing so unless you can find a firmware file that Moto Uses to program each and every Moto G with that includes said partitions you can not get them back. As of current there is no way of recovering the IMEI even if you use JTAG as we do not have the decryption key to programme NV_550 area (Which is read-only without a code)
[Moto G Q&A, Help & Troubleshooting] skyguy126:
Just did a dump of utags and inside I can clearly see my IMEI, anyone willing to change and try flashing or dd'ing.

EDIT: Too good to be true sorry! It looks like I was looking at the sku number instead. But I do see an imei mention in utags but it is followed by blanks.
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
[MENTION=6036514]skyguy126[/MENTION] Utags partition is the barcode that you can view when in Fastboot AP mode mate, it can be changed all you want it will not fix the issue. Sorry
[Moto G Q&A, Help & Troubleshooting] skyguy126:
I thought /proc/config was the barcode not utags.
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
uTags is defo barcode mate me and the other guy tried it. If you want you can flash utagbackup to utag partition and give that a try if you want.
[Moto G Q&A, Help & Troubleshooting] ol_st:
Is it possible replce not the whole motherboard, but a specific part, e.g. gsm unit? Will it work? Or I should find the whole new motherboard to replace the old one with the firmware?
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Until there is away to repair the IMEI after a erase using fastboot, i am afraid its a new phone basically. sorry.
[Moto G Q&A, Help & Troubleshooting] :
Damn, pain in the bottom. Must be a good few of us in this situation now. It's frustrating though, logically it is only a software problem so of course it's possible to fix it. There is and will be a way, just need to keep at it. My phone is still lonely on my desk if I can sacrifice it towards any testing that could contribute
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Problem is the area to write the imei back has write protection enabled so we can change the imei back in the software but we can't write it back to the phone without knowing the spc code which Motorola used.
[Moto G Q&A, Help & Troubleshooting] :
Mm, I wonder if its hypothetically crackable. How long would it take I wonder
[Moto G Q&A, Help & Troubleshooting] skyguy126:
Decompilied kernel, looking through to see if I can disable write protect.
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Good luck bud, I very much don't think it can be done due to the nature of where it resides, I have a funny feeling that it read-only unless a SPC code is found to flip a bit.
[Moto G Q&A, Help & Troubleshooting] skyguy126:
Any idea where the spc is located and or how to generate it.
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Haven't the slightest where it would be mate.
[Moto G Q&A, Help & Troubleshooting] Tosgaba:
God damn SPC

Yeah, we all know at the moment that we need that stupid code to fix this issue.

One week ago in the citycentre i went to a repair shop and asked if they can fix my imei with those dongles/boxes but reply was "Not yet" :(
[Moto G Q&A, Help & Troubleshooting] Tosgaba:
Today i red a blog post about repairing IMEI on some snapdragon devices and applied on my xt1032 first part went ok but when rebooted qpst saw my device as unknown platform/model.

Then tried writing nv item backup to device it failed.

No wi-fi no bt no signal, imei unknown.

Here is what i did and screenshot.

Partitiontable from stock retail de 5.0.2

C:\Program Files\Minimal ADB and Fastboot>adb devices

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

List of devices attached

TA88303BKP device

C:\Program Files\Minimal ADB and Fastboot>adb shell

shell@falcon_umts:/ $ cat /proc/partitions

cat /proc/partitions

major minor #blocks name

253 0 163840 zram0

179 0 7634944 mmcblk0

179 1 65536 mmcblk0p1

179 2 512 mmcblk0p2

179 3 32 mmcblk0p3

179 4 512 mmcblk0p4

179 5 200 mmcblk0p5

179 6 400 mmcblk0p6

179 7 32 mmcblk0p7

179 8 512 mmcblk0p8

179 9 2048 mmcblk0p9

179 10 2332 mmcblk0p10

179 11 512 mmcblk0p11

179 12 200 mmcblk0p12

179 13 400 mmcblk0p13

179 14 32 mmcblk0p14

179 15 512 mmcblk0p15

179 16 1052 mmcblk0p16

179 17 1536 mmcblk0p17 modemst1

179 18 1536 mmcblk0p18 modemst2

179 19 512 mmcblk0p19

179 20 8 mmcblk0p20

179 21 1536 mmcblk0p21 fsg

179 22 1 mmcblk0p22

179 23 8 mmcblk0p23

179 24 1024 mmcblk0p24

179 25 128 mmcblk0p25

179 26 3072 mmcblk0p26

179 27 4096 mmcblk0p27

179 28 4096 mmcblk0p28

179 29 8192 mmcblk0p29

179 30 512 mmcblk0p30

179 31 10240 mmcblk0p31

259 0 10240 mmcblk0p32

259 1 678016 mmcblk0p33

259 2 999424 mmcblk0p34

259 3 8192 mmcblk0p35

259 4 5791616 mmcblk0p36

179 32 512 mmcblk0rpmb

shell@falcon_umts:/ $

cmd commands

# adb shell

# su

# dd if=/dev/zero of=/dev/block/mmcblk0p17

# dd if=/dev/zero of=/dev/block/mmcblk0p18

# dd if=/dev/zero of=/dev/block/mmcblk0p21

# reboot
[Moto G Q&A, Help & Troubleshooting] :
So is all hope lost guys? :(
[Moto G Q&A, Help & Troubleshooting] Tosgaba:
Still waiting

skyguy and a couple of other friends working on it but i think they are busy nowadays.

For myself; i tried every possible solution, hint or experiment on my xt1032 but couldn't make any progress :(
[Moto G Q&A, Help & Troubleshooting] ol_st:
Is it possible to order somewhere motherboard, replace it and bring the phone to usage?..
[Moto G Q&A, Help & Troubleshooting] Tosgaba:
Yeah, that is correct
[Moto G Q&A, Help & Troubleshooting] ol_st:
Can you suggest a reliable selller?
[Moto G Q&A, Help & Troubleshooting] ol_st:
Friends, I found on 4pda.ru an article of a guy who was successful to recover bricked Snapdragon based OpePlus One smartphone. He says, that it could be done in 5-15 mins with right understanding of what to do. Please, have a look at it, maybe it will bring a light to recovering Moto G http://www.androidbrick.com/ultimate-qualcomm-snapdragon-unbrick-guide-snapdragons-are-unbrickable/

PS One UK Moto Service Centre said that they could recover my Moto G just for 59 EUR for doing something. I think this is too much for the service.
[Moto G Q&A, Help & Troubleshooting] skyguy126:
Interesting...
[Moto G Q&A, Help & Troubleshooting] Giancarlosc:
this looks intersting too

http://www.androidbrick.com/qualcomm-snapdragon-imei-tamiri-ders-4-qualcomm-snapdragon-imei-repair/
[Moto G Q&A, Help & Troubleshooting] ol_st:
Thank you! Yesterday together with the author of this article and the resource we tried to do these steps, however without success for the time. Today we will have the 2nd session :)
[Moto G Q&A, Help & Troubleshooting] ol_st:
No luck for the time :(
[Moto G Q&A, Help & Troubleshooting] Ariel_:
Hi!

I have a quick question... i have a new moto G, is there a way to copy all partitions from the new phone and put them into the old (broken) one ?

i think this will make both my phones to have the same IMEI, and since i still have the original IMEI from the old one, overwrite it somehow...

is this possible (to duplicate all partitions from a working phone into the broken one AND to change IMEI once partitions are duplicated?)

Thanks in advance!

PS: if possible... can anybody point me in the right direction? thanks!
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Sorry can't help you on that one bus due to legal reasons cloning imei's is the same as changing. This thread is about recovering the original imei from a 0 x16 state.
[Moto G Q&A, Help & Troubleshooting] ol_st:
I think, it won't work. As there's no quite well understanding where IMEI is stored in Moto G.
[Moto G Q&A, Help & Troubleshooting] kuky_nekoi:
:c

Bad news, my phone had 000000 as SPC code... Tried to unlock it and I only got an AccessDenied... It seems that SPC is not the answer.
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Reason why it failed is because we dont have the spc code as we don't now how its calculated 00000 will always fail.
[Moto G Q&A, Help & Troubleshooting] linkcharger:
Hi,

so after a read-write error that corrupted some partitions I had to start over and reinstall everything. In my stupidity I started starting over by "fastboot erase all".. OS installation worked fine of course (vanilla 5.1 GPe on a non-GPe XT1032), just didn't have Wifi or a connection in the beginning. Flashed the radio (tried several.. after a few attempts it finally worked) and then I had Wifi and a mobile connection (3G).

The problem was that the connection was inconsistent at times, sometimes i wouldn't even be able to make a call because there was no connection to a cell tower at all, in areas where before I did the reset I had H+.

It is possible that the connection would be established after some time but I haven't tested that yet because I didn't want to stand there for 10min staring at my phone ;).

Thinking it would just be a non-optimal radio I did a bit of research when I stumbled upon the IMEI. When I wanted to look what mine was (by dialing) I got the "IMEI 0".

And this is where my question arises: firstly how is this, that I don't have an IMEI and still get a connection, possible (maybe relevant intel: I live in germany.. so maybe the service providers don't enforce this IMEI thing that much here?) and secondly can this be of any help to solve this thread's problem?

One hypothesis for the inconsistent connection is that because I don't have an IMEI I get a lower "priority" from the cell towers...

Thanks, have a good one!
[Moto G Q&A, Help & Troubleshooting] ol_st:
Welcome to the club :/

You erased your IMEI and still now there's no possibility to restore it. Some operators are strict, others are not so, but mainly over Europe you have to have your unique IMEI to use the GSM/UMTS services.
[Moto G Q&A, Help & Troubleshooting] mhsamim19:
I'm IN!

Hey Guys,

I'm in the family of IMEI 0 for both of my IMEI's on my XT1068.

I'm currently on Lollipop

After *#06# it shows for both IMEI's 0

But fastboot getvar all and fastboot getvar imei gives me my IMEI...at least one.

I got Wifi working, Bluetooth and GPS also.

Only networks fails completely.

I read all posts and replies here but I ask my self wether I still have a chance since #getvar imei shows my IMEI.?!

Since my phone is just a tablet now I am ready to contribute and help, I am not a pro in programming but maybe I can help.
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Relash stock firmware back should fix your xt1068. Just don't use fastboot erase all else you'll lose that I me I for good.
[Moto G Q&A, Help & Troubleshooting] mhsamim19:
So I did it back to stock 4.4.4, but no *#06# Shows me IMEI 1: 0 and IMEI 2: null.

getvar imei gives still my first IMEI. I am trying to flash another stock ROM maybe something changes.

---------- Post added at 04:49 PM ---------- Previous post was at 04:32 PM ----------

So I flashed the first firmware of xt1068 now and I am back with IMEI 1 = 0 and IMEI 2 = 0.

#getvar imei still gives me the right IMEI
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Ok did you use mfastboot to restore your stock firmware?
[Moto G Q&A, Help & Troubleshooting] mhsamim19:
Yes I used :

mfastboot.exe flash partition gpt.bin

mfastboot.exe flash motoboot motoboot.img

mfastboot.exe flash logo logo.bin

mfastboot.exe flash boot boot.img

mfastboot.exe flash recovery recovery.img

mfastboot.exe flash system system.img_sparsechunk.0

mfastboot.exe flash system system.img_sparsechunk.1

mfastboot.exe flash system system.img_sparsechunk.2

mfastboot.exe flash system system.img_sparsechunk.3

mfastboot.exe flash modem NON-HLOS.bin

mfastboot.exe erase modemst1

mfastboot.exe erase modemst2

mfastboot.exe flash fsg fsg.mbn

mfastboot.exe erase cache

mfastboot.exe erase userdata

mfastboot.exe reboot
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Looks like you partition holding imei is corrupt big time then.
[Moto G Q&A, Help & Troubleshooting] mhsamim19:
Tried everything!

So I tried possibly everything, besides finding a flashbox which repairs the IMEI illegaly and costs too much there is no solution.

Would be grateful if someone could help me out here since my situation is not as bad as the others :D

Otherwise my phone is hear and ready to experiment with...

Probably, all I achieved was switching IMEI2:null to IMEI2: 0 and the other way around.

Is there a way to have a look on the partition holding imei?
[Moto G Q&A, Help & Troubleshooting] pradeeppk:
You may try this, found it on Razer HD forum, also please report if it worked.

http://xdaforums.com/showthread.php?t=1960918
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
It will not work due to the nv550 area being read only. You can dump the nv550 area without it but it will always fail to write it back. We know this as its been tried already.
[Moto G Q&A, Help & Troubleshooting] bludotos:
Hi! I did finally decompile that file. Needed to do it to find out what's inside and create a singleboot.img (I bricked my moto g) the imei is not in there more does it get written in there. It is on the hardware itself. I don't remember exactly what address its at but its won't be easy to write to it (set as read only access)
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
[MENTION=5383643]bludotos[/MENTION] could you PM me please.
[Moto G Q&A, Help & Troubleshooting] PuLKit4xd:
I need links to Movistar Chile Moto g and other chile Moto g firmwares. Can anybody help me get them?

Thanks in advance!
[Moto G Q&A, Help & Troubleshooting] lost101:
If firmware image is not available, request it in this thread: http://xdaforums.com/moto-g/general/index-moto-g-falcon-factory-firmware-t3110795
[Moto G Q&A, Help & Troubleshooting] PuLKit4xd:
UPDATE: My final findings! [Extracted HOB and DHOB attached]

1. Dhob and Hob are nothing but plain text partitions, Dhob is dynamic hob and Hob is static Hob.

2. Dhob stores cryptotext by default, this crypto text contains information like Imei, ESN, Meid etc.

3. The Hob partition is a XML formatted plain-text file that contains Data which i am not sure about.

4. Uses a PBKDF2 key for encryption and decryption of Dhob.

5. The size field in Hob is Hex. So, 16 is 22 and 32 is 50.

6. The modem updates NV items on the fly which is why you can get 0 and null IMEI by fiddling.

7. In case the IMEI doesn't match with equipment then NV item is made 0.

8. EFS is created on the go not sure.

The things are going over my head, i will add information once i am back to my senses.

Just check the attached resources.

You can try and flash those hob and dhob, base band turns 00a and network signal comes but IMEI stays 0. So, no cheating hahahah.

Please do not Host those files somewhere else just email them if someone asks.

The aim is to interpret HOB and decrypt Dhob and swap information. Please do not hesitate to ask somebody who is good at this stuff for help.

There is a modem.b21.htm file in the archive. Open and search for "d_hob" and "s_hob" in file to find relevant information.

It says "serial number is longer than PASSKEY_MAX_LEN" and "cannot get salt".

Good Luck!

UPDATE: Dhob is a text file obtained when a base64 file is converted to text. So that base64 encoded data should be of the prime concern.
[Moto G Q&A, Help & Troubleshooting] killerBRs:
My Dhob is lost, any solution?

IMEI Is 0 on system

Nothing on Bootloader...
[Moto G Q&A, Help & Troubleshooting] killerBRs:
Deleted post
[Moto G Q&A, Help & Troubleshooting] killerBRs:
You lost imei using Fastboot Erase all?
[Moto G Q&A, Help & Troubleshooting] betatan:
Has been quite a while, but yes, I think I did. Phone still works, even flashed custom rom.
[Moto G Q&A, Help & Troubleshooting] lost101:
That command wipes all partitions, many of which are unique to each handset. The factory firmware image does not restore any of those partitions. I don't mean to doubt you, but it's not possible to restore the lost partition data by flashing a firmware image.
[Moto G Q&A, Help & Troubleshooting] killerBRs:
Why the motorola leaves files literally protected , erase content that way? with a single command .. causing the worst ..

( Well, almost the worst problems, the worst is Hard brick .. )

What the f*** '-'
[Moto G Q&A, Help & Troubleshooting] lost101:
Motorola doesn't provide factory firmware images - with the exception of Developer Edition phones.

The images on this forum are here via third party. Motorola provide zero official support.

Fastboot is not user-friendly because it's mainly intended for use by engineers, at retail and carrier level.

I'm sorry you got such a hard lesson.
[Moto G Q&A, Help & Troubleshooting] PuLKit4xd:
Please check my previous post again, i have something to share.

It is safe to share Hob and Dhob partitions if you are comfortable, no counterfeit IMEI is possible. Please do it or ask to share so i can analyze files deeply.

---------- Post added at 11:41 PM ---------- Previous post was at 11:39 PM ----------

What firmware did you flash?

Please tell.
[Moto G Q&A, Help & Troubleshooting] betatan:
You can doubt me, as you can see, has been quite some months already and Im not so sure about my words, I shall backtrack files and posts to refresh my mind What I mean with "factory firmware" is the firmmare image of the network, in this case "Movistar Chile".

The tale goes like this, I got this phone (XT1032), got it rooted, flashed custom rom, everything was ok. I got a call and noticed it had trouble with the mic's volume (too low, stuff for another thread) and after checking it was not a rom issue I decided to let it as it was when I got it (otherwise warranty's void) so I could just ask for a change. Looked around for factory roms, got one, I got the wrong one, flashed anyway, and then the IMEI=0 started.

The wrong ROM included mfasboot inside, I think It was a gpt system, it had a readme file which said something around the lines of "flash each file individually" I think each partition had its own file to flash. The right one for me has a boot.img and 3 folders with files inside (META-INF, recovery, system)

Phone still works without problems (mic is still broken tho) , if you need any file or info let me know.

Firmware I flashed (the right one) was Public_X.C_[M12]_OK_v4r1_[4.4.4_P-O_RTM-3_CM11]_20141125-N_20141125

Im currently running custom rom 3.4.104-XPerience-18.
[Moto G Q&A, Help & Troubleshooting] PuLKit4xd:
[MENTION=5382571]betatan[/MENTION] Did you run "fb erase all" command?

DO NOT RUN IF YOU HAVEN'T!
[Moto G Q&A, Help & Troubleshooting] betatan:
Im not sure to be honest, I may search the "wrong" rom again and test. I remember this rom having mfastboot and a .cmd (or .bat) file which contained the commands needed.

But after all this, there's only two possibilities:

- IMEI is in a partition that wasnt affected when I flashed the wrong ROM, but couldnt be interpreted the right way, else, I wouldnt be able to recover my IMEI when I flashed the right ROM.

- Same as above, but IMEI as a hardware thing, Im not very versed in this subject.

I will try to find the "wrong" ROM and have a look at the commands in the .cmd (or .bat) file. I remember there was a repository of roms in this forum.
[Moto G Q&A, Help & Troubleshooting] RestlessScreams:
I did 'fastboot erase all' after soft bricking it. But IMEI still shows up in fastboot.

Gesendet von meinem Moto G 2014 mit Tapatalk
[Moto G Q&A, Help & Troubleshooting] PuLKit4xd:
The hob partition stores MD5 hash of proc items such as IMEI and SKU. MEID is for CDMA phones. There are sections of HOB which are same for all phones.

http://xdaforums.com/moto-g-2014/help/lost-imei-erase-help-t2981784

The HOB files compared by me after downloading and i found that, single-sim and dual-sim devices have some common sections. One from Brazil and other from India but they had common serial number.

Even if you manage to write NV items, they would be turned to zero by the modem since the MD5SUM would fail to match. And that MD5 sum is encrypted in HOB.
[Moto G Q&A, Help & Troubleshooting] askermk2000:
I remember looking into this a year ago and I found this: www.google.com/patents/WO2010068303A1?cl=en

So yeah, I think you're right.
[Moto G Q&A, Help & Troubleshooting] PuLKit4xd:
Serial number is hex so the salt must be Hex too!

I suspect the IMEI could serve as the salt. I wish there were more examples to study.
[Moto G Q&A, Help & Troubleshooting] srikanth979:
IMEI = 0

Did anyone in this forum tried flashing hob, dhob and fsc partitions from IMEI available phone?
[Moto G Q&A, Help & Troubleshooting] PuLKit4xd:
Did you run fastboot erase all?
[Moto G Q&A, Help & Troubleshooting] hacktrix2006:
Do bit run that command you will be left without an imei if you do.
[Moto G Q&A, Help & Troubleshooting] Eurofighter_ty:
adb commands

"adb root"

"adb remount"

"adb push hub.img /scard/hub.img "

"adb push fsc.img /sdcard/fsc.img"

"adb push dhub /sdcard/dhub.img"

"adb shell"

"dd if=/sdcard/hub.img of=/dev/block/platform/msm_sdcc.1/by-name/hob"

"dd if=/sdcard/dhub.img of=/dev/block/platform/msm_sdcc.1/by-name/dhob"

"dd if=/sdcard/fsc.img of=/dev/block/platform/msm_sdcc.1/by-name/fsc"

"reboot"

Take that files from a working Moto G and then flash it on yours. And you will get the signal back but still no IMEI. I don't know if you can make calls but you can try it. I take this instructiuons from 2014 Moto G:

http://xdaforums.com/moto-g-2014/help/lost-imei-erase-help-t2981784/page3
[Moto G Q&A, Help & Troubleshooting] srikanth979:
fastboot erase all -- used (Which should not be done ever as per my experience)

yes. :( I have tried flashing hob,dob and fsc using

dd if=/sdcard/hob.img of=/dev/block/platform/msm_sdcc.1/by-name/hob

but no help :(
[Moto G Q&A, Help & Troubleshooting] ol_st:
Guys, could you suggest some company in Eastern Europe, which could change the logic board of my phone? Better in Ukraine.
[Moto G Q&A, Help & Troubleshooting] Cryoera:
Can ı use these or my XT1033 to get back signals

i did erase all command as a big mistake

i saw some ppl who managed to get back signal but no imei i hope it will work for me too0

http://xdaforums.com/moto-g-2014/help/lost-imei-erase-help-t2981784/page3
[Moto G Q&A, Help & Troubleshooting] PuLKit4xd:
Well, you will definitely get back the signal. The calling may or may not work for you, in Brazil it does even with IMEI 0.
[Moto G Q&A, Help & Troubleshooting] ol_st:
Did anybody have positive results applying these recommendations?..
[Moto G Q&A, Help & Troubleshooting] ol_st:
Solved. I got back the signal after reflashing hob, dhob and fsc. IMEI is provided by Xposed (though only one IMEI instead of 2, I have dual sim phone).
[Moto G Q&A, Help & Troubleshooting] juniordistefano:
need help, i have fastboot erase all

what can i do? i dont what to try everything with no sense