Where is imei stored in moto android? - GSM-Forum

Nicogalan · 02-11-2015, 18:43

We know samsung store imei on efs folder, sony, on trim area or hwconfig...

where is moto storing imei???

dest · 02-12-2015, 07:27

Samsung doesn't store IMEI in efs folder on all models, only exynos CPUs. Moto QUALCOMM uses the same as all QCM models, inside EFS raw. Only modem can decrypt partition into EFS raw.

Nicogalan · 02-12-2015, 21:03

So, how to even read moto qualcomm??

where are they stored??

sorry, I did not undertand

can we access somehow to EFS raw??

thanks

dest · 02-12-2015, 22:02

You can only access encrypted EFS, so its useless for you. Unless you figured out how to decrypt it. In android, partitions modemst1 and modemst2 are encrypted EFS.

Nicogalan · 02-13-2015, 04:30

I know some reversing, but I dont know where are they exactly....

so, it seems they are not files......

how to access???

with root explorer, can we try to download and check??

but as you say, they are not files.... so, how??? O_O

thanks

Nicogalan · 02-16-2015, 07:58

I readed the note 3 post on this subforum, its a great post....

is cpuid involved in moto qualcomm too??

msm7630

thanks

dest · 02-17-2015, 01:59

UID is in all QUALCOMM. I THINK it is used to decrypt to EFS raw. That's why you can't write modemst from one phone to another.
BTW, I remember you from mobile-files a very long time.

Nicogalan · 02-17-2015, 03:10

Yes, I got your name in my head too, probably from the old mobile-files

and I think you were active at cdma

I was supermod there....

and mod at "decoding and programming" and "motorola iden phones"

could you point me how to get things needed to try to read and write that partitions???

uid, etc???

tools needed??

thanks so much

regards

..::SuB::.. · 02-17-2015, 14:13

Get a modem dump and learn how the decryption work. This is a tipp, im not an expert in this

if the modem fw decrypts the efs, the algo is there.

Nicogalan · 02-17-2015, 23:03

I'll try it....

what ida version do you advise??

thanks

manish1991 · 02-18-2015, 07:18

Quote:

Originally Posted by ..::SuB::..

Get a modem dump and learn how the decryption work. This is a tipp, im not an expert in this

if the modem fw decrypts the efs, the algo is there.

helloo brt . plz help how to make modem dump . can u share any software

thanx in advance

**Brka** · 02-18-2015, 21:03

Quote:

Originally Posted by manish1991

helloo brt . plz help how to make modem dump . can u share any software

thanx in advance

root the phone, after you will have modem partition available (mapped) onto some mmcblkpXX partition,
after is trivial ... adb pull command ...

@Nicogalan .... nice to see you, again, bro

b.r.
Alex.

Nicogalan · 02-19-2015, 23:37

Quote:

Originally Posted by Brka

root the phone, after you will have modem partition available (mapped) onto some mmcblkpXX partition,
after is trivial ... adb pull command ...

@Nicogalan .... nice to see you, again, bro

b.r.
Alex.

Hello Alex

I tried the pull command and its not working.....

I think you need to do first DD command...

example:

adb shell dd if=/dev/block/mmcblk0p2 of=tmp_header bs=512 count=1

then you can pull

adb pull tmp_header ~/Desktop/tmp_header

dest · 02-19-2015, 23:56

Use this:
/dev/block/platform/msm_sdcc.1/by-name/
All files in that folder are linked to MMC partitions and named. Some phones may have a different msm_sdcc.1 folder. Also, you don't need to worry about blocksize or count.
dd if=/dev/block/platform/msm_sdcc.1/by-name/modem of=/data/local/tmp/modem
chmod 777 /data/local/tmp/modem
adb pull /data/local/tmp/modem

Nicogalan · 02-23-2015, 06:44

Great, so...

what fields are "changeable"??

cpuid is OTP?? can be changed??

is there a way to "dump" from one phone and write it to another one? ans get same imei as original dump??

jtag?? can jtag do this??

02-11-2015, 18:43	#1 (permalink)
Nicogalan Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina Posts: 431 Member: 331917 Status: Offline Thanks Meter: 214	Where is imei stored in moto android? We know samsung store imei on efs folder, sony, on trim area or hwconfig... where is moto storing imei???

02-12-2015, 07:27	#2 (permalink)
dest No Life Poster Join Date: Jun 2004 Location: USA Age: 39 Posts: 1,142 Member: 67927 Status: Offline Thanks Meter: 108	Samsung doesn't store IMEI in efs folder on all models, only exynos CPUs. Moto QUALCOMM uses the same as all QCM models, inside EFS raw. Only modem can decrypt partition into EFS raw.

02-12-2015, 21:03	#3 (permalink)
Nicogalan Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina Posts: 431 Member: 331917 Status: Offline Thanks Meter: 214	So, how to even read moto qualcomm?? where are they stored?? sorry, I did not undertand can we access somehow to EFS raw?? thanks

02-12-2015, 22:02	#4 (permalink)
dest No Life Poster Join Date: Jun 2004 Location: USA Age: 39 Posts: 1,142 Member: 67927 Status: Offline Thanks Meter: 108	You can only access encrypted EFS, so its useless for you. Unless you figured out how to decrypt it. In android, partitions modemst1 and modemst2 are encrypted EFS.

02-13-2015, 04:30	#5 (permalink)
Nicogalan Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina Posts: 431 Member: 331917 Status: Offline Thanks Meter: 214	I know some reversing, but I dont know where are they exactly.... so, it seems they are not files...... how to access??? with root explorer, can we try to download and check?? but as you say, they are not files.... so, how??? O_O thanks

02-16-2015, 07:58	#6 (permalink)
Nicogalan Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina Posts: 431 Member: 331917 Status: Offline Thanks Meter: 214	I readed the note 3 post on this subforum, its a great post.... is cpuid involved in moto qualcomm too?? msm7630 thanks

02-17-2015, 01:59	#7 (permalink)
dest No Life Poster Join Date: Jun 2004 Location: USA Age: 39 Posts: 1,142 Member: 67927 Status: Offline Thanks Meter: 108	UID is in all QUALCOMM. I THINK it is used to decrypt to EFS raw. That's why you can't write modemst from one phone to another. BTW, I remember you from mobile-files a very long time.

02-17-2015, 03:10	#8 (permalink)
Nicogalan Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina Posts: 431 Member: 331917 Status: Offline Thanks Meter: 214	Yes, I got your name in my head too, probably from the old mobile-files and I think you were active at cdma I was supermod there.... and mod at "decoding and programming" and "motorola iden phones" could you point me how to get things needed to try to read and write that partitions??? uid, etc??? tools needed?? thanks so much regards

02-17-2015, 14:13	#9 (permalink)
..::SuB::.. No Life Poster Join Date: Aug 2008 Location: The Matrix :) Age: 36 Posts: 654 Member: 833760 Status: Offline Sonork: 100.1597150 Thanks Meter: 114	Get a modem dump and learn how the decryption work. This is a tipp, im not an expert in this if the modem fw decrypts the efs, the algo is there.

02-17-2015, 23:03	#10 (permalink)
Nicogalan Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina Posts: 431 Member: 331917 Status: Offline Thanks Meter: 214	I'll try it.... what ida version do you advise?? thanks

02-19-2015, 23:56	#14 (permalink)
dest No Life Poster Join Date: Jun 2004 Location: USA Age: 39 Posts: 1,142 Member: 67927 Status: Offline Thanks Meter: 108	Use this: /dev/block/platform/msm_sdcc.1/by-name/ All files in that folder are linked to MMC partitions and named. Some phones may have a different msm_sdcc.1 folder. Also, you don't need to worry about blocksize or count. dd if=/dev/block/platform/msm_sdcc.1/by-name/modem of=/data/local/tmp/modem chmod 777 /data/local/tmp/modem adb pull /data/local/tmp/modem

02-23-2015, 06:44	#15 (permalink)
Nicogalan Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina Posts: 431 Member: 331917 Status: Offline Thanks Meter: 214	Great, so... what fields are "changeable"?? cpuid is OTP?? can be changed?? is there a way to "dump" from one phone and write it to another one? ans get same imei as original dump?? jtag?? can jtag do this??