was going to see if I can decompile the nonhob.bin file. (A look at it shows it does some interesting things. Maybe modify it to flash a backed hob or something?).
The thing is these partitions are unmountable as they have no file system. Now trying to open with binary reader and figuring out stuff is too pro and nightmare for me. So another dead end here. Sorry but there is no way around here except to get your board replaced. :/Can we modify momdest to mount hob and dhob on boot. Or even make it so that once it has write access make it write the imei. Can someone please tell me how to unpack/decomplie momdest and motoboot. I am using my moto g as a test bench so I am pretty willing to do these things.
Update: (Deleted what I posted because I think its illegal
I just used a ext4 Unpacker and used HxD. But you seem really far ahead to helping us.
Hello. If "fastboot erase all" messed up your imei then there is no way to get it back. Trust me i have spent a considerable time to retrieve it back. First all as i have mentioned earlier and with lost101, we agreed on the following:
1. fastboot erase all deletes IMEI
2. The following partitions are erased with above command: hob,dhob,fsc,modemst1,modemst2,fsg
3. fsg,modemst1,modemst2 are restored when flashing stock rom but not hob,dhob,fsc which implies IMEI is stored in one of those.
4. modem requests for read/write permission to dhob and hob on bootup further strengthening theory.
5. These partitions do not get mounted on bootup only in fastboot. So unless you have custom bootloader that can access these partitions in boot mode, there is probably no way to get IMEI back.
But, if you messed up your radio and your IMEI is "Unknown", then there is very much chance to get back your IMEI. Just flash compatible radio. This case happens mostly when flashing cyanogens or other custom firmwares. As you can read on other posts people flashed their stock back and hence their IMEI is restored which actually was never erased and was there the whole time.
Lastly, trying to write IMEI with NV writing method such as DFS or any other tool will not bring back IMEI as it doesnt really write anything. IMO NV_550 variable which holds IMEI in most devices is useless in MotoG as i checked with DFS, it gave error unknown variable meaning MOTO G does not support it.
Hope that helps.
I definitely will, I found some more information while examining the binary. There is a mode called "trusted boot" where all partitions are accessible and writeable. There might be a way to put your phone into trusted boot, but for that I need to examine motoboot.img The ext4 unpacker does not work on this file and nor do any iso extractors. Does anyone know how I can extract/decompile motoboot.img?I would surely have helped you but I already changed my motherboard. :/ Didn't have any option, I had to get my sim working. But please share your work as it can help others
Sent from my XT1033 using XDA Free mobile app
Running fastboot oem cid_prov_req gives an unlock code similar to the bootloader unlock. But I believe there is another process that will put the device into production mode by using that code... In production mode we can do ramdumps and imei changes. Haven't figured out how to use that code though, working on it...
Its a 512 kb file.....Probably a file system file.....try opening with ext2 or ext3?Is this too good to be true......
Look at the attachment!
No, I opened it with HxD and all the text is readable. Looks like some sort of encryption keys. (Which I know because of examining the radio image, hob contains encryption keys to decrypt dhob which contains the imei and other stuff) I also got dhob but it is unreadable in HxD probally because its encrypted. Has anyone already managed to extract the file or am I the first one?
<element>
<id>00000</id>
<index>0</index>
<size>000</size>
<data>
fjkahfjksdhfkjsadhfkjasdfhalsdfhkjasdfhvbcxznvbxmnvb,xmcz
</data>
</element>
